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All the king's horses, and all the king's men, 
Couldn't put Humpty together again. 



P4 Abstract 

The existence of one-way functions (owf) is arguably the most important problem 
O ■ in computer theory. The article discusses and refines a number of concepts relevant to 

this problem. For instance, it gives the first combinatorial complete owf, i.e., a function 
which is one-way if any function is. There are surprisingly many subtleties in basic 
■ definitions. Some of these subtleties are discussed or hinted at in the literature and 

£S| . some are overlooked. Here, a unified approach is attempted. 

o 

1 Introduction I: Inverting Functions 

o ■ & 

o 



From time immemorial, humanity has gotten frequent, often cruel, reminders that many 
things are easier to do than to reverse. When the foundations of mathematics started to be 
seriously analyzed, this experience immediately found a formal expression. 

1.1 An Odd Axiom 

Over a century ago, George Cantor reduced all the great variety of mathematical concepts to 
just one — the concept of sets — and derived all mathematical theorems from just one axiom 
scheme — Cantor's Postulate. For each set-theoretical formula A(x), it postulates the exis- 
tence of a set containing those and only those x satisfying A. This axiom looked a triviality, 
almost a definition, but was soon found to yield more than Cantor wanted, including contra- 
dictions. To salvage its great promise, Zermelo, Fraenkel, and others pragmatically replaced 
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Cantor's Postulate with a collection of its restricted cases, limiting the types of allowed prop- 
erties A. The restrictions turned out to cause little inconvenience and precluded (so far) any 
contradictions; the axioms took their firm place in the foundations of mathematics. 

In 1904, Zermelo noticed that one more axiom was needed to derive all known mathemat- 
ics, the (in)famous Axiom of Choice: every function / has an inverse g such that f(g(x)) = x 
for x in the range of /. It was accepted reluctantly; to this day, proofs dependent on it are 
being singled out. Its strangeness was not limited to going beyond Cantor's Postulate — it 
brought paradoxes! Allow me a simple illustration based on the ability of the axiom of choice 
to enable a symmetric choice of an arbitrary integer. 

Consider the additive group T = R/Z of reals mod 1 as points x G [0, 1) on a circle; 
take its subgroup Qio C T of decimal fractions a/10 b . Let f(x) be the (countable) coset 
x + Qio, i.e., / projects T onto its factor group T/Q w . Any inverse g of / then selects one 
representative from each coset. Denote by G = g(f(T)) the image of such a g; then each 
x G T is brought into G by exactly one rational shift x + q, q G Qio- Now I will deviate from 
the standard path to emphasize the elementary nature of the paradox. One last notation: 
q' = (10q) mod 1 is q G Qio, shortened by the removal of its most significant digit. 

For a pair p,g 6 Qio, I bet 2 : 1 that x + p rather than x + q falls in G for a random 
x G T. The deal should be attractive to you since my bet is higher while conditions to win 
are completely symmetric under rotation of x. To compound my charitable nature to its 
extreme, I offer such bets for all q G Qio, q > 0, p = q' , not just one pair. If you rush 
to accept, we choose a random x (by rolling dice for all of its digits) and find the unique 
q G Qio for which x + q G G. Then I lose one bet for this q and win ten (for each q such 
that q' = q). Generosity pays! 

This paradox is not as easy to dismiss as is often thought. Only 11 bets are paid in each 
game: no infinite pyramids. Moreover, if x is drawn from a sphere S2, a finite number of 
even unpaid bets suffices: Banach and Tarski [1 constructed 6 pairs, each including a set 
Ai C 5*2 and a rotation Tjj betting x G A{ versus Tj(x) G A4, they lose one bet and win two 
for each x. Our x +p and x + q above are tested for the same condition and differ in finitely 
many digits; all digits are evenly distributed and independent. One can refuse the thought 
experiment of rolling the infinite number of digits of x or the question of whether x + q G G, 
but this amounts to rejecting basic concepts of the set theory. It is simpler to interpret the 
refusal to bet as a hidden disbelief in the Axiom of Choice. 

1.2 Finite Objects: Exhaustive Search 

These problems with inverting functions have limited relevance to computations. The latter 
deal with finite objects, which are naturally well-ordered by Induction Axioms, rendering 
the Axiom of Choice unnecessary. There are other mitigating considerations, too. Shannon 
Information theory assigns to a random variable x as much information about its function 
f(x) as to f(x) about x. Kolmogorov (algorithmic) information theory (see [21 El) extended 
this concept from random to arbitrary x: I(x : y) is the difference between the smallest 
lengths of programs generating y and of those transforming x to y. Kolmogorov and I 
proved in 1967 that this measure is symmetric too, like Shannon's, albeit approximately 
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The proof involved a caveat: computationally prohibitive exhaustive search of all strings 
of a given length. For instance, the product pq of two primes contains as much (i.e., all) 
information about them as vice versa, but [H] and great many other things in modern cryptog- 
raphy depend on the assumption that recovering the factors of pq is infeasible. Kolmogorov 
suggested at the time jH] that this information symmetry theorem may be a good test case to 
prove that for some tasks exhaustive search cannot be avoided (in today's terms, P 7^ NP). 

The RSA application marked a dramatic twist in the role of the inversion problem: 
from notorious troublemaker to priceless tool. RSA was the first of the myriad bewildering 
applications which soon followed. At the heart of many of them was the discovery that the 
hardness of every one-way function f(x) can be focused into a hard-core bit, i.e., an easily 
computable predicate b(x) which is as hard to determine from f(x), or even to guess with 
any noticeable correlation, as to recover x completely. 

In [7j, the first hard-core for f(x) = a x mod p was found, which was soon followed with 
hard-cores for RSA and Rabin's function (x 2 mod n), n = pq, and for "grinding" functions 
f*(xi, . . . ,x n ) = f(xi), . . . , f(x n ) (see jS]; for the proof of Isolation Lemma used in [S], see 
0). In [TU], the general case was proved (see also [H1H2])- 

The importance of such hard-cores comes from their use, proposed in [7J |Hj for unlimited 
deterministic generation of perfectly random bits from a small random seed s. In the case 

of permutation /, such generators are straightforward: g s {i) = 6(/*(s)), i — 0, 1, 2, The 

general case was worked out in [13 . 

With the barrier between random and deterministic processes thus broken, many previ- 
ously unthinkable feats were demonstrated in the 80s. Generic cryptographic results (such 
as, e.g., |14j). zero- knowledge proofs, and implementation of arbitrary protocols between dis- 
trusting parties (e.g., card games) as full information games [15] are just some of the many 
famous examples. This period was truly a golden age of Computer Theory brought about 
by the discovery of the use of one-way functions. 

2 Introduction II: Extravagant Models 
2.1 The Downfall of RSA 

This development was all the more remarkable as the very existence of one-way (i.e., easy to 
compute, infeasible to invert) functions remains unproven and subject to repeated assaults. 
The first came from Shamir himself, one of the inventors of the RSA system. He proved JH] 
that factoring (on infeasibility of which RSA depends) can be done in polynomial number of 
arithmetic operations. This result uses a so-called "unit-cost model," which charges one unit 
for each arithmetic operation, however long the operands. Squaring a number doubles its 
length, repeated squaring brings it quickly to cosmological sizes. Embedding a huge array of 
ordinary numbers into such a long one allows one arithmetic step to do much work, e.g., to 
check exponentially many factor candidates. The closed-minded cryptographers, however, 
were not convinced and this result brought a dismissal of the unit-cost model, not RSA. 
Another, not dissimilar, attack is raging this very moment. It started with the brilliant 
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result of Peter Shor. He factors integers in polynomial time using an imaginary analog 
device, Quantum Computer (QC), inspired by the laws of quantum physics taken to their 
formal extreme. 

2.2 Quantum Computers 

QC has n interacting elements, called q-bits. A pure state of each is a unit vector on the 
complex plane C 2 . Its two components are quantum amplitudes of its two Boolean values. 
A state of the entire machine is a vector in the tensor product of n planes. Its 2 n coordinate 
vectors are tensor-products of q-bit basis states, one for each n-bit combination. The ma- 
chine is cooled, isolated from the environment nearly perfectly, and initialized in one of its 
basis states representing the input and empty memory bits. The computation is arranged as 
a sequence of perfectly reversible interactions of the q-bits, putting their combination in the 
superposition of a rapidly increasing number of basis states, each having an exponentially 
small amplitude. The environment may intervene with errors; the computation is done in an 
error-correcting way, immune to such errors as long as they are few and of special restricted 
forms. Otherwise, the equations of Quantum Mechanics are obeyed with unlimited precision. 
This is crucial since the amplitudes are exponentially small and deviations in remote (hun- 
dredth or even much further) decimal places would overwhelm the content completely. In 
[T7] . such computers are shown capable of factoring in polynomial time. The exponentially 
many coordinates of their states can, using a rough analogy, explore one potential solution 
each and concentrate the amplitudes in the one that works. 

2.3 Small Difficulties 

There are many problems with such QCs. For instance, thermal isolation cannot be per- 
fect. Tiny backgrounds of neutrinos, gravitational waves, and other exotics, cannot be 
shielded. Their effects on quantum amplitudes need not satisfy the restrictions on which 
error-correcting tools depend. Moreover, nondissipating computing gates, even classical, 
remain a speculation. Decades past, their existence was cheerfully proclaimed and even 
proved for worlds where the laws of physical interaction can be custom-designed. In our 
world, where the electromagnetic interaction between electrons, nuclei, and photons is about 
the only one readily available, circuits producing less entropy than computing remain hypo- 
thetical. So, low temperatures have limits and even a tiny amount of heat can cause severe 
decoherence problems. Furthermore, the uncontrollable degrees of freedom need not behave 
simply as heat. Interaction with the intricately correlated q-bits may put them in devilish 
states capable of conspiracies which defy imagination. 

2.4 Remote Decimals 

All such problems, however, are peanuts. The major problem is the requirement that basic 
quantum equations hold to multi-hundredth if not millionth decimal positions where the 
significant digits of the relevant quantum amplitudes reside. We have never seen a physical 
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law valid to over a dozen decimals. Typically, every few new decimal places require major 
rethinking of most basic concepts. Are quantum amplitudes still complex numbers to such 
accuracies or do they become quaternions, colored graphs, or sick-humored gremlins? I 
suspect physicists would doubt even the laws of arithmetic pushed that far. In fact, we know 
that the most basic laws cannot all be correct to hundreds of decimals: this is where they 
stop being consistent with each other! 

And what is the physical meaning of 500 digit long numbers? What could one possibly 
mean by saying "This box has a remarkable property: its many q-bits contain the Ten 
Commandments with the amplitude whose first 500 decimal places end with 666"? What 
physical interpretation could this statement have even for just this one amplitude? Close 
to the tensor product basis, one might have opportunities to restate the assertions using 
several short measurable numbers instead of one long. Such opportunities may also exist for 
large systems, such as lasers or condensates, where individual states matter little. But QC 
factoring uses amplitudes of an exponential number of highly individualized basis states. I 
doubt anything short of the most generic and direct use of these huge precisions would be 
easy to substitute. One can make the amplitudes more "physical" by choosing a less physical 
basis. Let us look into this. 

2.5 Too Small Universe 

QC proponents often say they win either way, by making a working QC or by finding a 
correction to Quantum Mechanics; e.g., in jTH] Peter Shor said: "If there are nonlinearities 
in quantum mechanics which are detectable by watching quantum computers fail, physicists 
will be VERY interested (I would expect a Nobel prize for conclusive evidence of this)." 

Consider, however, this scenario. With few q-bits, QC is eventually made to work. The 
progress stops, though, long before QC factoring starts competing with pencils. The QC 
people then demand some noble prize for the correction to the Quantum Mechanics. But 
the committee wants more specifics than simply a nonworking machine, so something like 
observing the state of the QC is needed. Then they find the Universe too small for observing 
individual states of the needed dimensions and accuracy. (Raising sufficient funds to compete 
with pencil factoring may justify a Nobel Prize in Economics.) 

Let us make some calculations. In cryptography, the length n of the integers to factor 
may be a thousand bits (and could easily be millions.) By ~ n, I will mean a reasonable 
power of n. A 2~ n dimensional space H has 2 2 " nearly orthogonal vectors. Take a generic 
v G H . The minimal size of a machine which can recognize or generate v (approximately) 
is K = 2~ n — far larger than our Universe. This comes from a cardinality argument: 2~ K 
machines of K atoms. Let us call such v "meg astates. 

There is a big difference between untested and untestable regimes. Claims about individ- 
ual megastates are untestable. I can imagine a feasible way to separate any two QC states 
from each other. However, as this calculation shows, no machine can separate a generic QC 
state from the set of all states more distant from it than QC tolerates. So, what thought 
experiments can probe the QC to be in the state described with the accuracy needed? I 
would allow to use the resources of the entire Universe, but not morel 
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Archimedes made a great discovery that digital representation of numbers is exponentially 
more efficient than analog ones (sand pile sizes). Many subsequent analog devices yielded 
unimpressive results. It is not clear why QCs should be an exception. 

2.6 Metric versus Topology 

A gap in quantum formalism may be contributing to the confusion. Approximation has two 
subtly different aspects: metric and topology. Metric tells how close our ideal point is to 
a specific wrong one. Topology tells how close it is to the combination of all unacceptable 
(nonneighboring) points. This may differ from the distance to the closest unacceptable point, 
especially for quantum systems. 

In infinite dimensions, the distinction between and positive separation between a point 
and a set varies with topologies. In finite dimensions, 0- vs. -positive distinction is too coarse: 
all topologies agree. Since 2 500 is finite only in a very philosophical sense, one needs a quan- 
titative refinement, some sort of a weak-topological (not metric) depth of a neighborhood 
polynomially related to resources required for precision to a given depth. Then, precision to 
reasonable depths would be physical, e.g., allow one to generate points inside the neighbor- 
hood, distinguish its center from the outside, etc. 

Metric defines e-neighborhoods and is richer in that than topology where the specific 
value of e is lost (only e > is assured). However, metric is restricted by the axiom that 
the intersection of any set of ^-neighborhoods is always another e-neighborhood. Quantum 
proximity may require both benefits: defined depth e and freedom to express it by formulas 
violating the "intersection axiom." Here is an example of such a violation, without pretense 
of relevance to our needs. Suppose a neighborhood of is given by a set of linear inequalities 
fi(x) < 1; then its depth may be taken as 1/ XI II /ill- Restricting x to the unit sphere would 

i 

render this depth quadratically close to metric depth. A more relevant formula may need 
preferred treatment of tensor product basis. 

2.7 The Cheaper Boon 

QC of the sort that factors long numbers seems firmly rooted in science fiction. It is a pity 
that popular accounts do not distinguish it from much more believable ideas, like Quantum 
Cryptography, Quantum Communications, and the sort of Quantum Computing that deals 
primarily with locality restrictions, such as fast search of long arrays. It is worth noting that 
the reasons why QC must fail are by no means clear; they merit thorough investigation. The 
answer may bring much greater benefits to the understanding of basic physical concepts than 
any factoring device could ever promise. The present attitude is analogous to, say, Maxwell 
selling the Daemon of his famous thought experiment as a path to cheaper electricity from 
heat. If he did, much of insights of today's thermodynamics might be lost or delayed. 

The rest of the article ignores any extravagant models and stands fully committed to 
the Polynomial Overhead Church-Turing Thesis: Any computation that takes t steps on an 
s-bit device can be simulated by a Turing Machine in s°( 1 H steps within s ^ cells. 
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3 The Treacherous Averaging 

Worst-case hardness of inverting functions may bring no significant implications. Imagine 
that all instances come in two types: "easy" and "hard." The easy instances x take ||:r|| 2 
time. An exponential expected time of randomized algorithms is required both to solve, and 
to find any hard instance. So, the Universe would be too small to ever produce intractable 
instances, and the inversion problem would pose no practical difficulty It is "generic," not 
worst-case, instances that both frustrate algorithm designers and empower cryptographers 
to do their incredible feats. The definition of "generic," however, requires great care. 

3.1 Las Vegas Algorithms 

First we must agree on how to measure the performance of inverters. Besides instances 
x = f(w), algorithms A(x,a) inverting one-way functions / can use random dice sequences 
a E {0, 1} N . They never need a chance for (always filterable) wrong answers. So we restrict 
ourselves to Las Vegas algorithms which can only produce a correct output, abort, or diverge. 

For a given x, the performance of A has two aspects: the volume 1 V of computation and 
the chance py (over a) of success in V steps. They are not independent: p can be always 
boosted while roughly preserving V/p (more precisely — V/ log(l— p)) by simply running A on 
several independent a. This idea suggests the popular requirement that Las Vegas algorithms 
be normalized to, say, p>\- The problem with this restriction is that estimating p and the 
needed number of trials may require exponential volume overhead in the worst case. Thus, 
only such measures as average volume can be kept reasonable while normalizing the chance. 
It is important that both are averaged only over A's own dice a; the instance x is chosen by 
the adversary. In this setting, the duplicity of performance aspects does become redundant: 
p and average volume are freely interchangeable (to shrink the latter, one simply runs A 
with a small chance). 

Combining several runs into one lessens the modularity and counting the runs needed does 
involve some overhead. However, there are more substantial reasons to prefer normalization 
of average volume to that of the success rate p. In some settings, success is a matter of 
degree. For instance, different inverses of the same instance of a owf may be of different 
and hard-to-compare value. Normalizing the average volume, on the other hand, is robust. 
This volume bound may be 0(1) if the model of computation is very specific. If flexibility 
between several reasonable models is desired, polynomial bounds, specific to each algorithm, 
may be preferable. There is one obstacle: the set of algorithms with a restricted expected 
complexity is not recursively enumerable. We can circumvent this problem by using the 
following enforceable form of the bound. 

Definition 1 Las Vegas algorithms A(x, a) G LV(6) start with a given bound b(x) on ex- 
pected computation volume. At any time, the algorithm can bet a part of the remaining 



I say volume rather than time, for greater robustness in the case of massively parallel models. 
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volume, so that it is doubled or subtracted depending on the next dice of a. LV(0(1)) usually 
suffices and we will abbreviate it as L. 2 

Despite its tight 0(1) expected complexity bound, L is robust since any Las Vegas algo- 
rithm can be put in this form, roughly preserving the ratio between the complexity bound 
and the success rate. The inverse of the latter gives the number of runs required for a 
constant chance of success, thus playing the role of running time. An extra benefit is that 
a reader adverse to bothering with the inner workings of computers can just accept their 
restriction to L and view all further analysis in purely probabilistic terms! 

3.2 Multimedian Time 

Averaging over the instance x is, however, much trickier. It is not robust to define generic 
complexity of an algorithm A(x) running in t(x) steps as its expected time ~Ei x t(x). A different 
device may have a quadratic time overhead. For instance, recognition of input palindromes 
requires quadratic time on a Turing machine with one tape, but only linear time with two 
tapes. It may be that a similar overhead exists for much slower algorithms, too. Then 
t(x) may be, say, ||x|| 2 for x ^ 0*, while t(0 . . .0) may be 2" :E " for one device and 4^11 for 
another. Take x uniformly distributed on {0, 1}". Then E x t(x) for these devices would be 
quadratic and exponential respectively: averaging does not commute with squaring. Besides, 
this exponential average hardness is misleading since the hard instances would never appear 
in practice! 

More device-independent would be the median time, the minimal number of steps spent 
for the harder half of instances. This measure, however, is not robust in another respect: it 
can change dramatically if its half threshold is replaced with, say, a quarter. 

Fortunately, these problems disappear as one of the many benefits of our Las Vegas 
conventions. One can simply take algorithms in L and measure their chance of success for 
inputs chosen randomly with a given distribution. The inverse of this chance, as a function 
of, say, input length, is a robust measure of security of a one-way function. This measure 
is important in cryptography, where any noticeable chance of breaking the code must be 
excluded. A different measure is required for positive tasks aimed at success for almost all 
instances. We start by considering a combined distribution over all instance lengths. 

Definition 2 We consider an L- distribution of instances, i.e., a distribution of outputs of 
an L-algorithm's on empty input. 3 Now, we run the generator k times (spending an average 
time of 0{k)) and apply the inverter until all generated solvable instances are solved. 4 " The 

2 Pronounced "Las" algorithms to hint at Las Vegas and the term's inventor Laszlo Babai. I would like to 
stress that no YACC (Yet Another Complexity Class) is being introduced here. L is a form of algorithms; 
this is much less abstract than a class of algorithms or, especially, a class of problems solvable by a class of 
algorithms. Besides, it is not really new, just a slight tightening of the Las Vegas restriction. 

3 If the instance generator is not algorithmic, the definition can be modified to use the output length 
instead of complexity in the definition of L. The instances of length n should have probabilities combining 
to a polynomial, e.g., p(x) = l/(||x|| log ||x||) 2 . 

4 If the generator can produce unsolvable instances too, the definition ignores them. 
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number of trials is a random variable depending on the inverter's and generator's dice. Its 
median value MT{k) is called the multimedian time of inverting f by A. 

This measure is robust in many respects. It commutes with squaring the inverter's 
complexity and, thus, is robust against variation of models. It does not depend much on the 
\ probability cut-off used for median. Indeed, increasing A; by a factor of c raises MT(&) as 
much as does tightening the inverter's failure probability to 2~ c . 

MT is relevant for both upper and lower bounds. Let T(x) be high for e fraction of 
x G {0, l} n . Then MT(fc) is as high for k = n 3 /e. Conversely, let MT(k) be high. Then, 
with overwhelming probability, T(xj) is at least as high for some of n = k 2 random x\, . . . , x n 

(aadENI = 0(n)). 

i 

3.3 Nice Distributions 

So far, we addressed the variance of performance of a randomized algorithm over its vari- 
able dice for a fixed input, as well as the issue of averaging it over variable input with a 
given distribution. Now we must address the variance of distributions. Choosing the right 
distributions is not always trivial, a fact often dismissed by declaring them uniform. Such 
declarations are confusing, though, since many different distributions deserve the name. 

For instance, consider graphs G = (V,Ec V 2 ), \\V\\ = n, where n is chosen with 
probability c/n 2 (here, c is a normalizing factor). For a given n, graphs G are chosen with 
two distributions, both with a claim to uniformity: \i\ chooses G with equal probability 
among all 2 n graphs; \ii first chooses k = \\E\\ with uniform probability l/(n 2 + 1) and then 
G with equal probability among all the CK candidates. The set {G : \\E\\ = n L5 } has then 
fi2 probability l/(n 2 + 1), while its \L\ is exponentially small. In fact, all nice distributions 
can be described as uniform in a reasonable representation. Let me reproduce the argument, 
sketched briefly in [Tj5], adding an additional aspect that I will use later. 

Let us use set-theoretic representation of integers: n = {0, 1, . . . , n — 1}. A measure \i 
is an additive real function of sets of integers; fi(n) = /i({0}) + /i({l}) + . . . + /i({n — 1}) 
is its monotone distribution function. Its density n'{n) = fi(n + 1) — u.(n) = fi({n}) is the 
probability of {n} as a singleton, rather than of a set n = {0, 1, . . . ,n — 1}. Let Q2 be the 
set of binary fractions i/2^ l « E [1/2, 1). We round the real-valued /x to Q2, keeping only as 
many binary digits as needed for constant factor accuracy of probabilities. 

Definition 3 \l: N — ► Q2 is perfectly rounded if fi(x) is the shortest fraction within the 
interval — l),fi(x+ 1)) and — log = 0(||x||). 

The last condition is just a convenience and can be met simply by mixing the (monotone) 
\i with some simple distribution. 

Lemma 1 Every computable \x: N — > Q2 can be uniformly transformed into a perfectly 
rounded /Ji computable at most \\x\\ times slower than n.(x) and so that, for nondecreas- 
ing \i (i.e., one with \i! > 0), \i! x > ///4. 
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Monotonicity is assured by comparing fi(x) with fi(y), for prefixes y of x G Q2- Then 
the claim can be achieved by rounding. First, round fi(x) to the shortest binary p that is 
closer to it than to any other n(y) and call these rounded values points. Find all slots, i.e., 
closest to p shorter binary fractions of each binary length. Then, for each slot in the order 
of increased lengths, find the point that fills it in the successive roundings until the slot for 
x is found. 

All perfectly rounded /i have a curious property: bothm(a;) = fi(x) / /j,({x}) and ||m(x)|| = 
— log/x({x}) are always integers, making fi(x) = .m(x) G Q2, a fraction expressed by bits 
of m(x) following the dot. So m is quite uniformly distributed: 2ku.(m~ 1 (k)) G [1,2] for 
k G m(N). It is also computable in polynomial time, as m _1 is (by binary search). So, we 
can use m(x) as an alternative representation for x, in which the distribution /i is remarkably 
uniform. 

Simple distributions are not normally general enough. They may be the ultimate source 
of the information in the instances x of our problems, but the original information r is 
transformed into x by some process A that may itself be something like a one-way function. 
We can assume that A is an algorithm with a reasonable time bound, but not that its 
output distribution is simple. Such distributions are called samplable. In [20J, samplable 
distributions are dealt with in a similar manner as with those in this section, though through 
a different trick. 

4 Completeness 

4.1 Complete Distributions and Inverters 

Given a function to invert, how would one generate hard instances? There are two aspects of 
the problem. The first is achieving a significant probability of generation of hard instances. 
The second is keeping the probability of easy instances negligible. A number of reductions 
(with various limitations) exist between these tasks. Let us restrict our attention to the first 
one. 

First, note that Lemmanenumerates all distributions computable in time t(x), preserving 
t within a linear factor. Thus, we can generate the largest of all these distributions by 
adding them up with summable coefficients, say, 1/i 2 . This distribution will be complete 
for TIME(t(x)) and belong to TIME(t(a;)||x||). A nice alternative would be to combine 
all complexities by translating high times into small probabilities, similarly to Section 13.11 
Instead, we will switch to samplable distributions directly. 

Definition 4 Distributions generated by algorithms in L without input are called samplable. 
// the algorithm has inputs, they are treated as a parameter for a family of samplable distri- 
butions. 

Usual versions of this definitions are broader, allowing a class of algorithms closer to 
LV(P) and generation of polynomially larger distributions; we limit the generators to L for 
greater precision. 
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Proposition 1 There exists a complete, i.e., largest up to constant factors, family of sam- 
plable distributions. 

The lemma follows if we note that L is enumerable and, thus, the complete distribution 
can be obtained by choosing members of L at random and running them. The generator of 
this distribution spends 0(1) average time per run and has the greatest in L (up to a constant 
factor) capacity for generating surprises. (Compared to LV(P) algorithms, its chance of a 
nasty surprise may be polynomially smaller.) 

Since the complete distribution makes sense only to within a constant factor, it is robust 
in logarithmic scale only and defines an objective hardness of "hitting" a set X given x. 

Notation 1 By Kl(X/x), we denote the — log of probability of a set X under the complete 
distribution family parameterized by x. 

As often happens, a strong attack tool helps inventing a strong defense. Optimal searches 
were noted, e.g., in [2~"" l l22 [ l"""""| but here we get a nice version for free. The complete generator 
of hard instances can be used as an optimal algorithm for solving them. Since algorithms in 
L combine time into probability, their performance is measured by their chance of success. 
The generator of an optimal distribution family (parameterized by the instance x) has the 
highest, up to a constant factor, chance l/S(f/x) = 2 _K1< ^ ( x )/ x ) of generating solutions. 
Its minus logarithm s(f jx) measures the hardness of each individual instance x and is called 
its security. The generator takes an 0(1) average time per run and succeeds in expected 
S(f jx) runs. No other method can do better. 

Open problem. The constant factor in the optimal inversion algorithm may be arbitrarily 
large. It is unknown whether it can be limited to a fixed constant (say, 10) independent of 
the competing algorithm for sufficiently large instances. 

4.2 Inversion Problems and OWFs 

A complete distribution achieves about as high probability of hard instances as possible. 
Using it makes the choice of a hard-to-invert function easy: all NP-complete functions would 
do similarly well. However, the interesting goal is usually to find a function that is tough for 
some standard, say, uniform distribution of instances. Serendipitously, Lemma [""] transforms 
any P-time distribution into a uniform one via an appropriate encoding. Combined with this 
encoding, any NP-complete function joins those hardest to invert. However, the encoding 
destroys the function's appeal, so the problem of combining a nice function with a nice 
distribution remains. 

Of course, while many functions seem hard, none are proven to be such. In [*"""1 12*01 "2U 
1231 12H1 E! > a number of combinatorial and algebraic problems are proved to be complete on 
average with uniform distributions, i.e., as hard as any inversion problem with samplable 
distribution could be. 
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These results, however, do not quite yield owfs. The difference between owf and complete 
on average inversion problems can be described in many ways. The simplest one is to define 
owfs as hard on average problems of inverting length-preserving functions. In this case the 
choice between picking at random a witness (crucial for owfs), or an instance, becomes 
unimportant. 

Indeed, each witness gives only one instance. So if length is preserved, the uniform 
distribution restricted to solvable instances does not exceed the one generated by uniformly 
distributed witnesses. On the other hand, if the witnesses are mapped into much fewer hard 
instances, they must have many siblings. Then, the function can be modified as follows. 
Guess the logarithm k of the number of siblings of the witness w and pick a random member 
a of a universal hash family h a (w). Output f(w),k,a,h' a (w), where hi is h truncated to k 
bits. (These outputs, i.e. instances, are k bits too long but can be hashed into strings of the 
same length as the witnesses.) The extra information in the output (if k is guessed correctly) 
is nearly random, and so makes inversion no easier. However, the siblings are separated into 
small groups and the numbers (and, thus, uniform probabilities) of hard instances and their 
witnesses become comparable. The converse is also true: 

Proposition 2 Any owf with multimedian V(k) of its security S(x) (for uniformly random 
w and x = f{w)) can be transformed into a length-preserving owf with a l/0(k) fraction of 
instances that have security polynomially related to V . 

First, the fraction of hard instances is boosted as described at the end of Section ET2l If 
the number of hard instances is much smaller than that of their witnesses, the function can 
still be made length-preserving without altering its hardness by separating the siblings as in 
the previous paragraph. See [2U] for more detailed computations of the results of hashing 
owfs. 

4.3 Complete OWF: Tiling Expansion 

We now modify the Tiling Problem to create a complete combinatorial owf. No such owf has 
been described yet, though [§J shows the existence of an artificial complete owf. It would be 
nice to have several complete owfs that are less artificial, i.e., intuitive to someone who does 
not care to know the definition of computability. Below, such an example is given as a seed. 
Hopefully, a critical mass of such examples will be achieved some day providing an arsenal 
for reductions to more popular owf candidates to show their completeness. 

NP versus owf completeness. It is a mystery why the industry of proving worst-case NP- 
completeness of nice combinatorial problems is so successful. Of course, such questions refer 
to art rather than science and so need not have a definite answer. It seems important that 
several "clean" complete combinatorial NP problems are readily available without awkward 
complexities that plague deterministic computation models. Yet, average-case completeness 
is only slowly overcoming this barrier. And for complete owfs, my appeal to produce even 
one clean example remained unanswered for two decades. 
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A complete owf is easy to construct as a modification of a universal Turing Machine 
(UTM). UTM computation, in turn, is easy to transform into combinatorial objects (tiled 
squares, etc.). These objects are stripped from the many technicalities needed to define 
a model of computation. Indeed, these technicalities are involved in making computation 
deterministic, which is unnecessary since the final relation is intended to be nondeterministic 
anyway. The "stripped" versions have simple combinatorial structure and appeal, which 
makes it possible to find so many reductions to other mathematical objects. 

This approach works for constructing average-complete NP problems. It fails, however, 
to preserve length which is needed for constructing complete owfs. (In some other definitions, 
length-preservation is replaced with other requirements, but these, too, are destroyed by the 
above construction.) Here, I use simple tools, such as the concept of expansion, to try to 
make a first step to overcome these problems. The construction preserves input length and 
retains clean combinatorial structure of tiling. I hope that this first step could be used as a 
master-problem for reductions to other nice owfs. 



Tiles: unit squares with a letter at each corner; 


a x 


x c 




may be joined if the letters match. 


e r 


r z 




Expansion: maximal tile-by-tile unique (using given tiles) 


e r 


r z 




extension of a partial tiling of a square with marked border. 


n s 


s z 





Definition 5 Tiling Expansion is the following function: Expand a given top line of tiles to 
a square using a given set of permitted tiles; output the bottom line and the permitted tiles. 



Theorem 1 Tiling Expansion is a owf if and only if owfs exist. 

The reduction. We start with a UTM, add a time counter that aborts after, say, n 2 steps. 
We preserve a copy of the program prefix and force it, as well as the input length, on the 
output. This produces a complete "computational" length-preserving owf. Now, we reduce 
the computation of the UTM, modified as above, to Tiling in a standard way. We add a 
special border symbol and restrict the tiles so that it can combine only with the input or 
output alphabets (of equal size), or with the end-tape symbol, or the state initiating the 
computation, depending on the sides of the tile. The expansion concept does the rest. 

Tiling is a nice combinatorial entity, but it lacks determinism. This demands specifying 
all tiles in the square, which ruins the length preservation. Requiring the set of tiles to force 
deterministic computation would involve awkward definitions unlikely to inspire connections 
with noncomputational problems, reductions to which is the ultimate goal. Instead, expan- 
sion allows an arbitrary set of tiles but permits the extension of a partially tiled square only 
at places where such possible extension is unique. In this way, some partially tiled squares 
can be completed one tile at a time; others get stuck. This process is inefficient, but efficiency 
loss (small in parallel models) is not crucial here. 

It remains an interesting problem to reduce this owf to other nice combinatorial or alge- 
braic owfs thus proving their completeness. 
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The raw owfs, however, are hard to use. While many results, such as, e.g., pseudo-random 
generators, require no other assumptions, their constructions destroy efficiency almost en- 
tirely. To be useful, owfs need other properties, e.g., low Renyi entropy. This low entropy 
is also required for transforming weak owfs into strong ones (while preserving security, as 
in [2B])> and for other tasks. The following note suggests a way that may achieve this. (Its 
f(x) + ax can be replaced with other hashings.) 

Remark 1 Inputs of g(a,x) = (a,f(x) + ax) have < 1 siblings on average for any length- 
preserving f and a, x &GF 2 \\x\\ . 

Conjecture 1 The above g is one-way, for any owf f, and has the same (within a polynomial 
factor) security. 
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OflHoit H3 Haii6ojiee BaacHbix npo6jieM TeopeTiinecKOH iraopopMaTHKH hbjihctch 
Bonpoc o cymecTBOBaHHH oflHOCTopoHHiix cpyHKi^HH. 3Ta CTaTtH paccMaTpiiBaeT H 

yTOHHHeT pHfl nOHHTHH, C HIM CBH3aHHbIX. B HaCTHOCTH, BIiepBbie npHBOflHTCH 5IBHOG 



q ! KOM6nHaTopHoe nocTpoeHne nojiHoit oflHOCTopoHHen cpyHKi^Hii (nojiHOTa 03HanaeT, hto 

3Ta apyHKiiira HBjraeTCH oflHOCTopoHHefi, ecjiH TaKOBbie Boo6m,e cymecTByicr) . OcHOBHbie 
KOHuermnii coflepacaT HeojKHflaHHO MHoro tohkoctch (nacTHHHO yace ynoMHHaBiniixca 
b jiHTepaType) . 3flecb npefljiaraercH HeKOToptiH e,a;iiHbiH noflxofl. 



1 BBe^eHne I: o6pam;eHHe <J>yHKii,HH 

C He3anaMHTHbix BpeMeH Hejic-BenecTBy He pa3 HanoMHHajiocb - HHor^a jkcctoko - hto 
c^ejiaHHoro He oSparanib. MaTeiviaTHKH CTOJiKHyjincb c cpopMajibHbiM BbipaxceHHeM stoh 
npoSjieivibi, eflBa HaaaB cepbe3HO aHajiH3npoBaTb ocHOBaHna CBoeii HayKH. 

1.1. CTpaHHaa aKCHOMa. Bojiee Bexa Ha3a,a, Teopr KaHTop npe^jio>KHji CBecTH Bee 
pa3HOo6pa3ne MaTeiviaTHHecKHx iioh5ithh k e^HHCTBeHHOiviy noHaTHio MHOJKecTBa, a Bee 
MaTeiviaTHHecKHe TeopeMbi - k eflHHCTBeHHoii cxeivie aKCHOM, KOTopyio mojkho Ha3BaTb 
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nocmyjiamoM Kanmopa. 3tot nocTyjiaT yTBepjK^aeT (flJia KajK^ofi dwpMyjibi A{x) b 
a3biKe Teopnn mhokcctb), hto cymecTByeT mhokcctbo, KOTopoe coctoht h3 Bcex x, 
fljia KOTopbix BbinojiHeHO A(x). 3to 6e3o6n,a,Hoe yTBep>KfleHHe (nonTH hto onpe^ejieHne 
noHaTHH MHO>KecTBa), KaK BCKope BbiacHHjiocb, HMecT MHoro cjie^CTBHH, h ^a>Ke Sojibine, 
neivi xoTejiocb 6bi: H3 Hero mojkho BbiBecTH npoTHBopenne. HtoSm cnac™ nojio>KeHHe, 
UepMejio, OpeHKejib n flpyriie MaTeiviaTHKH nparMaTnnecKn orpaHnnnjin nocTyjiaT KaHTopa 
HeKOTopbiMH ero nacTHMMH GJiynaaMH, pa3peniiiB Jinnib (popiviyjibi A cnennajibHoro 
BH^a. Ilpn 3tom Bpo^e 6m npoTHBopenna He nojiynaeTca, a Bee neHHoe npo,a,oji>KaeT 
BbiBO^HTbca. IlojiyHHjiacb aKCHOMaTHHecKaa Teopna MHO>KecTB, nrpaionraa neHTpajibHyio 
pOJIb B OCHOBaHHJIX MaTeiviaTHKH. 

B 1904 rcmy HepMejio 3aMeTHji, hto b ^OKa3aTejibCTBax MaTeMaTnnecKnx TeopeM 
Hcnojib3yeTca eme oflHa aKCHOMa, (nenajibHo) 3HaMeHHTaa clkcuomcl eu6opa. Ee mcokho 
C(popMyjiHpoBaTb Tax: ^jia bcskoh dpyHKirnn / cymecTByeT oSparaaa k Hen, T.e. Taxaa 

(pyHKHHH g, flJIH KOTOpOH f(g(x)) = X npH BCeX X H3 06jiaCTH 3HaneHHH (pyHKH^HH /. 

MaTeiviaTHKH nocTeneHHO npnHHJin ee, xoth h HeoxoTHo: ro chx nop Hcnojib30BaHHe stoh 
aKCHOMbi OTMenaeTca oco6o. AKCHOMa BbiSopa He aBjiaeTca nacrabiM cjiynaeM nocTyjiaTa 
KaHTopa, k TOMy >Ke HMeeT napa^OKcajibHbie cjie^CTBHH. Bot npocToii npHMep, ocHOBaHHbin 

Ha TOM, HTO 3Ta aKCHOMa n03BOJIfleT CUMMempUHHUU BblSop npOH3BOJIbHOrO H,ejIOrO HHCJia. 

PaccMOTpHM aflflHTHBHyio rpynny T = R/Z BemecTBeHHbix nnceji no MOflyjno 1, 
ecTecTBeHHO OTOK^ecTBjiaeMyio c OKpy>KHOCTbio h c npoMexcyTKOM [0, 1). IlycTb Qio ~~ ee 
no^rpynna, cocToamaa H3 Bcex KOHenHbix flecflTHHHbix ,zrpo6eH, T.e. nnceji BH^a a/10 6 . IlycTb 
/ conocTaBjiaeT c Ka>KflbiM hhcjiom x G T ero CMexiHbin Kjiacc x + Qio B (paKTop-rpynne 
T/Qio. 

JlioSaa oSpaTHaa k / dpyHKirna g BbiSnpaeT b KaxflOM cmgjkhom Kjiacce no 
npeflCTaBHTejiio. IlycTb G = g(f(T)) - MHOxcecTBO sthx npeflCTaBHTejieii, T.e. MHO>KecTBO 
3HaneHHH (pyHKnnn g. B stom cjiynae ^jih Ka>Kfloro x G T cymecTByeT e^HHCTBeHHbin 
c^Bnr H3 Qiq, nepeBOflainnn x BHyTpb G (h T pa36nBaeTca Ha cneTHoe hhcjio KJiaccoB, 
nojiynaioinnxcH H3 G c^BHroM Ha sjieMeHTbi Qiq). 

Mbl HeCKOJIbKO OTCTynHM OT Tpa^HH,HOHHOrO H3JIO>KeHHfl, HT06bI noflnepKHyTb 

sjieMeHTapHbiH xapaKTep paccMaTpHBaeMoro napa^OKca. Eme o^ho (nocjiemiee) 
o6o3HaneHne: ^jih jnoSoro nncjia q G Qio nepe3 q' mm o6o3HannM hhcjio (lOg) mod 1, 
nojiynaeMoe OTSpacbiBaHneM CTapniero pa3pa^a. 

IlycTb p,q - sjieMeHTbi Qiq. 51 npe^Jiaraio TaKoe napn: ecjin x + p G G (flJifl cjiynaimo 
BbiSpaHHOii tohkh x Ha OKpyjKHOCTH) , to bm njiaTHTe MHe pySjib, a ecjin x + q G G, to h 
njiany BaM flBa. 3to Bbiro^HO ^;jih Bac, nocKOJibKy moh CTaBKa Sojibnie, a ycjiOBHH Bbinrpbinia 
coBepnieHHO CHMMeTpnnHbi (cooTBeTCTByioru,He MHOJKecTBa OTjinnaiOTca noBopoTOM). Majio 
Toro, a roTOB 6biTb eru,e Sojiee me,ApbiM H oflHOBpeMeHHO 3aKjnonHTb MHoro TaKnx napn, 
no o^HOMy fljia Ka>K^oro q G Qw, q > 0; a CTaBjno Ha p = q' npoTHB q. KaK tojibko bbi 
corjianiaeTecb, mm BbiSnpaeM cjiynanHoe i6T (KajK^aa ero nndppa nojiynaeTca SpocaHneM 
necTHon MOHeTbi) n noflcnnTMBaeM Hanin npnSbiJin n ySbiTKH. IlycTb q - tot eflHHCTBeHHbin 
sjieMeHT MHOJKecTBa Qiq, flJia KOToporo x + q G G. Tor^a a nponrpbiBaio napn fljia 3Toro 
q n BbinrpbiBaio ^ecaTb napn (flJia Bcex q, npn kotopmx q' — q). IHeflpocTb OKynaeica, He 
npaB^a jih? 

He TaK npocTO oStacHHTb, b neM "KopeHb 3Jia" b stom napa^OKce. B KajK^on nrpe 
cpaSaTMBaiOT jihiub 11 napn, n o "(pnHaHCOBon nnpaMH^e" penb He H^eT. Bojiee Toro, ecjin 
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SpaTb b KaaecTBe x cjiyHaimyio TOHKy ccbepbi, to flaace o6in;ee hhcjio Bcex bo3mojkhbix napn 
mojkho c^ejiaTb KOHe^HbiM: BaHax n TapcKnii ^ noKa3ajiH, hto mojkho nocTponTb inecTb 
nap (Ai, Tj), r^e A\ ecTb hgkotopog no^MHoacecTBO ccbepbi S 2 , a Tj - noBopoT stoh ccbepbi, c 
TaKHM cbohctbom: CTaBfl Ha x € Ai npoTHB Ti(x) G Ai o^HOBpeivieHHO npn Bcex i = 1, . . . , 6, 
mm npoiirpbiBaeM o^ho napn n BbinrpbiBaeM flBa (npn jiio6om x). Bo3Bpaniaacb k Hanieiviy 
npniviepy, otmgthm, hto HHCJia x + p m x + q npoBepaiOTca Ha npHHa^Jie>KHOCTb k o^HOiviy 
h TOMy me MHOJKecTBy G h OTJinnaiOTca b KOHenHOM HHCJie ^ecHTHHHbix pa3pa^OB (npHneivi 
Bee pa3pa,nbi He3aBHCHMbi h paBHOBepoaTHbi). 

Ilo3BOJiHTejibHO ycoMHHTbca BOoSme b 3aKOHHOCTH MbicjieHHoro SKcnepnivieHTa, 
Hcnojib3yiOHi;ero 6ecKOHenHoe hhcjio cjiynanHbix 6pocaHnn, hjih b ocMbicjieHHOCTH Bonpoca 
o npHHa^JiejKHOCTH x + q MHoacecTBy G. Ho npn 3tom mm noKymaeMca Ha caMbie ochobbi 
TeopHH MHOJKecTB. Irpome HHTGpnpGTHpoBaTb OTKa3 ot Ka>Kyin;eroca Bbiro^HbiM napn KaK 
CKpbiToe He^OBepne k aKcnoMe BbiSopa. 

1.2. KoHeHHbie oGteKTbi h nojiHbift nepe6op. Teopnio BbinncjieHHH sth TpyoriocTH 
c o6pam,eHHeM (pyHKiinii 3aTparnBaiOT MeHbine, nocKOJibKy KOHenHbie o6 r bGKTbi h TaK BnojiHe 
ynopa^oneHbi (npHHiinnoM MaTeMaTnnecKoii HHflyKnnn) n aKCHOMa Bbi6opa hh k neMy. 
(TeM He MeHee Bonpoc 06 atfiqieKmueHOM o6paw i eHuu dpyHKirnn ocTaeTca aKTyajibHbiM.) 
K TOMy me nieHHOHOBCKaa Teopna HHCpopMannn ,n;jia jiio6oh (pyHKnnn / npHnncbiBaeT 
cjiyHaimoH BejinanHe x ctojibko me HHdpopMannn o cjiynaHHOH BejinanHe f(x), ckojibko 
f(x) o6x. KojiMoropoBCKaa (ajiropnTMnnecKaa) Teopna HH(popMannH (cm. [3 El) no3BOJiaeT 
onpe^ejiHTb noHaTne KOJinnecTBa HHdpopManriH fljia KOHenHbix (He o6a3aTejibHO cjiynanHbix) 
o6T.eKTOB: I(x : y), KOJinnecTBO HHdpopMannn b x 06 y, ecTb pa3HOCTb Mempy fljinHaMn 
KpaTHafliuHx nporpaMM, nopojKflaioiHHx y 6e3 ncnojiB30BaHna x h c Hcnojib30BaHHeM 
x. KojiMoropoB h aBTop HacToamen CTaTbH ^OKa3ajiH b 1967 ro^y, hto 3Ta BejinnnHa, 
noflo6HO nieHHOHOBCKOH, CHMMeTpHHHa: I(x : y) ~ I(y : x), xoTa 3to paBeHCTBO jihhib 
npH6jiH>KeHHoe [4J. 

B flOKa3aTejibCTBe ecTb no^BOx: ncnojiB3yeTca nojrabin nepeSop Bcex ctpok ,naHHOH 
^jiHHbi, TpeGyioiniiH HeBOo6pa3HMO orpoMHoro BpeMeHH. HanpHMep, npoH3Be,a,eHHe A B y x 

npOCTblX HHCejI COflep>KHT BCK) HH(pOpMan,HK) 06 3THX HHCJiaX (h Hao6opOT), HO H3BJieHb 
3Ty HH(pOpMan,HK) Ha npaKTHKe HeB03MO)KHO - HM6HHO Ha 3TOM npe^nOJIO>KeHHH OCHOBaHa 

cncTeMa RSA [H] h mhojkcctbo ^rpyrnx npneMOB coBpeMeHHon KpnnTorpa(pHH. KojiMoropoB b 
CBoe BpeMa yKa3biBaji Ha cbohctbo chmmctphh HHCpopMain™ KaK Ha o^Hy H3 3a^an, xoponio 
noflxoflflin;Hx fljia nonbiTKH ^OKa3aTb, hto nojiHbiH nepeSop HeycTpaHHM (P ^ NP, KaK 
CKa3ajiH 6bi cennac) [6J. 

noaBJieHHe CHCTeMbi RSA h3mghhjio B3rjiafl Ha Tpy^HO o6paTHMbie (pyHKii^HH; ^oca^Hoe 
npenaTCTBne CTajio He3aMeHHMbiM HHCTpyMeHTOM. 3a RSA nocjieflOBajio mhojkcctbo ^pyrnx 
y^HBHTejibHbix npHjio>KeHHH. OKa3ajiocb (h bto cymecTBeHHO ^jia MHornx H3 hhx), hto 
Tpy^HOCTb o6pam,eHHa (pyHKinin mojkho CKOHn,eHTpHpoBaTb b e^HHCTBeHHOM 6nTe. ToBopaT, 
hto (jierKO BbiHHCJiHMbin) npe^HKaT b(x) aBJiaeTca mpydnuM 6umoM (hard-core bit) ^jia 
Tpy^HO oSpaTHMofi (oflHOCTopoHHefl, one-way) (pyHKn^nn f(x), ecjin BOCCTaHOBHTb 3HaaeHne 
b(x) no f{x) (hjih yra^aTb co CKOJibKO-HnSy^b 3aMeTHoii Koppejiairnen) CTOJib me cjiojkho, 

KaK BOCCTaHOBHTb Bee X. 

BnepBbie TaKoii npe^HKaT 6biJi npeflJio>KeH b [2j flJia (pyHKn^nn f(x) = a 1 mod p. 
BcKope 6biJin yKa3aHbi Tpy^Hbie 6htm ^;jia cncTeMbi RSA, ^Jia dpyHKn^nn PaSnHa (x i— > 
I— > x 2 mod n, r^e n ecTb npon3BefleHne ^,Byx npocTbix nnceji), a TaKJKe ^Jia "flpo6am,nx" 
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(pyHKHHH BHfla f*(xx, . . . , x n ) = f(xi),... } f(x n ) (cm. |H]; flOKa3aTejibCTBO jieMMbi 06 
H30Jian,HH, Hcnojib3yeMOii b [H] npn aHajiroe TpyirHOCTH 6nTa, mo>kho HaiiTH b B |lflj 
peineH oShthh cjiynaii npoH3BOJiBHOH oflHOCTopoHHen (pyHKHHH (cm. TaKJKG [111 12J). 

iioneMy Tpy^Hbie Shtbi Tax BaacHbi? B [3 IE] noKa3aHO, KaK c hx noMonibio 
mojkho npeo6pa30BaTb KopoTKoe cjiynaHHoe ^BOHHHoe cjiobo (seed) b HeorpaHHHeHHyio 
nocjie^OBaTejibHOCTb 6htob, HeoTJiHHHMbix ot cjiynaimbix. Ecjih o^HOCTopoHHaa (pyHKirna 
/ aBJiaeTca nepecTaHOBKoii, to ro^HTca nocjie^OBaTejibHOCTb g s (i) = b(f' l (s)), i = 0, 1, 2, . . . 
OSihhh cjiynaii pa3pa6oTaH b [13J. 

TaKHM o6pa30M Sapbep Mex^y cjiynaimbiMH h ^eTepMHHiipoBaHHbiMii npon,eccaMH 
6bui pa3MbiT, h b 1980-x ro^ax 6biJin nojiyneHbi MHorne pe3yjibTaTbi, Ka3aBnineca 
paHee HeMbicjiiiMbiMii. Cpe^n hhx o6mHe TeopeMbi KpnnTorpacpHH (cm., HanpiiMep, 
[14J), KOHCTpyKii;HH flOKa3aTejibCTB c HyjieBbiM pa3rjianieHneM (zero-knowledge proofs) 
h peajiH3an,Ha npoH3BOJibHbix npoTOKOJiOB B3aHMO,a,eHCTBHa He ,a,OBepaioiirHx flpyry 
y^acTHHKOB (xaK SbiBaeT, cxa>KeM, b KapTOHHbix nrpax) b Biyje Hrp c nojiHoii HHcpopMairneH 
[15j. 3tot nepnofl mojkho Ha3BaTb 30jiotmm BeKOM TeopeTHHecKoii HHdpopMaTiiKii, h oh CTaji 

B03MOJKHMM 6jiarO,Hapa OflHOCTOpOHHHM (pyHKHHHM. 

2 BBe^,eHHe II: 

SKCTpaBaraHTHbie BbiHHCJiHTejibHbie Mo^ejin 

2.1. IlafleHHe RSA. SaMeTHM, hto Bee nepeaHCJieHHbie KOHCTpyKHiiH ocHOBaHbi Ha 

OflHOCTOpOHHHX (jierKO BblHHCJIHMblX H TpyiTHO o6paTHMbIx) (pyHKHHaX, a cymecTBOBaHne 

TaKHx (pyHKH,HH ocTaeTca jihihb rnnoTe30H, Heo^HOKpaTHO noflBepraBHieiica pa3Horo po^a 

COMHeHHSM. 

IlepBbiH 3nH30,i], TaKoro po,na CBa3aH c c&mhm IIIaMnpoM, oflHHM H3 H3o6peTaTejieH 
CHCTeMbi RSA. Oh flOKa3aji b ^Hl, ^to pa3Jio>KeHHe Ha MHOJKHTejin (Ha TpyirHOCTH KOToporo 
ocHOBaHa RSA) MoaceT 6biTb BbinojiHeHO 3a nojiHHOMnajibHoe hhcjio apncpMeTHaecKHx 
^eHCTBHH. ripn 3tom KajK^oe fleflcTBHe CHHTaeTca 3a o^Hy onepaiiHio, He3aBHCHMO ot 
^jiHHbi hhccji ("unit-cost model"), ripn B03Be,ii,eHHH b KBa^paT ^jiHHa HHCJia yirBanBaeTca, 
h noBTopHoe B03Be,ii,eHHe b KBa^paT SbiCTpo npHBOflHT k HHCJiaM KOCMOJiorHnecKoro 
pa3Mepa. O^ho TaKoe hhcjio MOJKeT KO^npoBaTb ^jihhhmh MaccHB o6biHHbix nnceji, h oflHofl 
onepairiiH cooTBeTCTByeT Sojibhioh oSteM paSoTbi (HanpHMep, npoBepKa SKcnoHeHHiiajibHoro 
HHCJia B03MOJKHbix flejiHTejieii) . AjiropHTM IIIaMnpa He npoH3Beji BnenaTJieHHa Ha kochmx 
KpnnTorpa(pOB: OTBeprHyTOH OKa3ajiacb BbinncjiHTejibHaa MO^ejib, HrHopnpyioiiiaa flJiHHy 
HHceji, a He RSA. 

,Upyraa He jinnieHHaa cxo^CTBa aTaxa Ha RSA nponcxo^HT b HacToamee BpeMa 
h Hanajiacb c 3aMenaTejibHoro pe3yjibTaTa HHTepa LQopa. Oh noKa3aji, hto mojkho 
pa3JiaraTb ancjia Ha mho^khtcjih 3a nojiHHOMHajibHoe BpeMa, Hcnanb3ya BOoSpajKaeMbie 
aHajioroBbie BbiiHCJiHTejibHbie ManiHHbi, Ha3BaHHbie KeanmoeuMU KOMnttomepaMU. 3th 

MaiHHHbl nOflCKa3aHbI 3aKOHaMH KBaHTOBOH (J)H3HKH (flOBefleHHblMH flO KpaHHOCTH). 

2.2. KBaHTOBbie KOMin>K>Tepi>i. KBaHTOBbin KOMnbioTep coctoht h3 n 
B3aHMOfleHCTByiorLi;Hx sjieMeHTOB, Ha3biBaeMbix Ky6umaMu (q-bits). KajK^bifi H3 hhx 
aBJiaeTca KBaHTOBofi CHCTeMofi; ee HHCTbie cocToaHna npe^CTaBJiaiOT coSofi eflHHHHHbie 
BeKTopbi b flByMepHOM KOMnjieKCHOM npocTpaHCTBe C 2 ; ^,Be KOMnoHeHTbi BeKTopa 
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apeacTaBJiaiOT co6oa aMBJiaTyabi flByx SyjieBCKiix 3aaaeaaa. CocToaaae cacTeMbi b aejiOM 
npe,a,CTaBjiaeT co6oh BeKTop b TeH3opHOM apoa3Be,aeBaa n aByMepBbix npocTpaHCTB. B 

3TOM npOH3Be,Il,GHHH eCTb 6a3HC H3 2 n BeKTOpOB, flBJIflK)IU,HXCa npOH3Be^eHH5IMH 6a3HCHbIX 
BeKTOpOB COMHOJKHTejIGH. KaJKflblH 6a3HCHbIH BeKTOp, TSKHM o6pa30M, COOTBeTCTByeT 

aBoaaaoMy cjiOBy aaaabi n. KBaHTOBbifl KOMnbiOTep oxaaacaaiOT, H30JinpyiOT ot BHeniHero 
Mupa noHTH aaeaabao a BOMemaiOT b 6a3acaoe cocToaaae, b kotopom aacTb 6htob 
o6pa3yeT Bxoaaoe cjiobo, a ocTajibHbie 6htm paBHbi Hyjiio. ^ajiee apoa3BoaiiTca 
Bbiaacjieaae, cocToanjee H3 aocjieapBaTejibaoro apaMeaeaaa aaeaabao o6paTHMbix 
apeo6pa30Baaaa, cooTBeTCTByiomax B3aaMoaeacTBaio Ky6aTOB. nojiyaeaaoe cocToaaae 
MoaceT 6biTb cyaepao3aaaea HeBOo6pa3HMO 6biCTpo pacTyajero aacaa 6a3HCHbix cocToaHaii 
c SKCBoaeaaaajibao MajibiMa aMBJiaTyaaivia. B3aaMoaeacTBae c OKpyacaiomea cpeapa 
MoaceT bhocbtb oihh6kh, aosTOMy BbiaacjieHae apeayciviaTpaBaeT KoppeKaaio 3Tax 
onia6oK (B03Moaaiyio, ecjia onia6Ka peaxa a aMeiOT caeaaajibabiii bha). B ocTajibaoM mm 
aojiaraeMca aa 3aKoabi KBaaTOBoa Mexaaaxa, caaTaa ax BbiaojiaeaabiMa c aeorpaaaaeaaoa 
ToaaocTbio. riocjieaaee apeaaojioaceaae BecbMa cymecTBeaao, aocKOJibKy aMBJiaTyabi 
3Kcaoaean;aajibBO Majibi a OTKJioaeaaa b cotom (ajia aaace aaiviBoro 6ojiee aaaeKOM) 3aaKe 
aocjie 3aaaT0ii MoryT aojiaocTbio a3MeaaTb xoa, Bbiaacjieaaa. 

B |17| aoKa3aao, hto TaKae KOMabiOTepbi MoryT BbiaojiaaTb pa3Jioaceaae aa MaoacaTeaa 
3a aojiaaoMaajibaoe Bpeivia. Hcaojib3ya rpy6yio aaajioraio, Moacao CKa3aTb, aTO Kaacaaa B3 
3Kcaoaean,aajibBoro aacjia KOopaaaaT apoBepaeT aeaaMOCTb aa cooTBeTCTByiomee aacjio, a 
aMajiaTy^bi KoaaeaTpapyiOTca b Tex KOopaaaaTax, KOTopbie cooTBeTCTByiOT aeaaTejiaM. 

2.3. MajieHbKne Tpy,aHOCTH. IIoabiTKa peajia30BaTb KOMabiOTepbi oaacaaaoro 
Baaa CTajiKaBaeTca c Maccoa apo6jieM. CKaateM, Tpyaao apeacTaBaTb ce6e aaeaabayio 
TepMoa30Jian,aio, ae roBopa yace o 3am,aTe ot aeaTpaao, rpaBaTaaaoaabix bojib a 
TOMy aoapSaoa 9K30THKH; ax BJiaaaae aa KBaaTOBbie aMBJiaTyabi ae o6a3aTejibao 
yapBJieTBopaeT ycjiOBaaM, ot kotopmx 3aBacaT KoppeKaaa oaia6oK. Bojiee Toro, aaace a 
KJiaccaaecKae Bbiaacjieaaa 6e3 pacceaaaa Teajia ocTaiOTca raaoTeTaaecKaivia, xoTa apo 
aax roBopaT yace aecKOJibKO aecaTajieTaii, a b BOo6paa<aeMbix Mapax c acKyccTBeaabiMa 
3aKoaaMa B3aaMoaeacTBaa ax cynjecTBOBaaae aaace apKa3aao. B peajibaoM Mape, rae 
aaivi apcTyaao b ocbobbom Jiaaib saeKrpoMaraaTaoe B3aaMoaeacTBae Meatfly sjieKTpoaaMa, 
aapaMa a (pOToaaivia, TaKoro poaa cxeMbi (apoa3Boaaai;ae 6ojibaiae Bbiaacjieaaa c MajibiM 
TeajiOBbiaejieaaeM) ocTaiOTca caeKyjiaTaBBbiMa. IIo3TOMy aoaaaceaae TeiviaepaTyp aivieeT 
apeaea, a aaate a aeSojibaioe KOJiaaecTBO Teajia MoaceT cajibao aapyaiaTb KorepeaTaocTb. 
Bojiee Toro, aeKOBTpojiapyeMbie CTeaeaa CBo6oabi MoryT SbiTb 6ojiee oaacabi, aeM apocToe 
aarpeBaaae: kto 3aaeT, k aeiviy MoaceT apaBecTa ax B3aaMoaeacTBae c Toaaaaaie 
CKoppejiapoBaaabiMa cocToaaaaivia KySaTOB? 

2.4. 3a cothh ixncpp ot 3anaTOH. Bee 3to aBeToaKa. OcaoBaaa apo6jieMa apyraa: b 
Tpe6oBaaaa, aTo6bi 3aKOBbi KBaaTOBoa MexaaaKB 6biJia capaBeaaaBbi c Toa (paaTacTaaecKoii 
ToaaocTbio (coTaa, ecjia ae MajuiaoBbi 3aaKOB aocjie 3aaaToa), KOTopaa ayacaa aaa 
KBaaTOBbix ajiropaTMOB. <I>a3BKa ae 3aaiOT aa oaaoro 3aKoaa, KOTopbia 6biji 6m capaBeaaaB 
c ToaaocTbio ap aecKOJibKax aecaTKOB 3aaKOB. KaK yaaT acTopaa cpH3HKH, Kaacabie 
aecKOJibKO caeayioajax 3aaKOB TpeSyiOT bobbix Teopaii a aepeocMbicjieaaa 6a3acabix 
aoaaTaii. MoaceT, apa TaKOM ypoBae ToaaocTa aaap caaTaTb KBaaTOBbie aMaaaTyabi ae 
KOMBJieKCBbiMa aacaaivia, a KBaTepaaoaaivia, pacKpaaieaabiMa rpacpaMa ajia rpeMJiaaaivia 
c aepabiM iomopom. . . 51 aoap3peBaio, aTO (pa3BKB a b 3aKoabi apacpMeTaxa-TO c TaKoii 
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TOHHOCTbio He BepaT. (Ha caMOM /j;ejie mm ^axce 3HaeM, hto ocHOBHbie 3aKOHM (|>h3hkh He 
MoryT BbinojiHATbca c TaKoii TOHHOCTbio, nocKOJibKy ohh HanHHaiOT npoTHBopennTb jrpyr 

H B006lH,e, KaKOH MOJKeT 6bITb (pH3HHeCKHH CMblCJI B 500-3HaHHOM HHCJie? IlyCTb 

mm roBopHM: "B 3tom anniKe xpaHATca Ky6nTM, KOTopbie co,i],ep>KaT tckct ^ecHTH 
3anoBefleii, c aMnjiHTyzKDH, b KOTopofi Tpn jj;ecHTHHHbie inicppbi, HannHaa c hhthcotoh, 
paBHbi 666". EcTb jih xoTb KaKofi-TO (pH3HnecKHH CMbicji b HaineM yTBep>KfleHHH? Ecjih 

COCTOaHHe CHCTeMbI 6JIH3KO K 6a3HCHbIM BeKTOpaM TeH30pHOrO npOH3Be^,eHHiI, TO MO>KHO 

Ha^eaTbca nepecpopMyjinpoBaTb yTBep>K,a,eHHe, 3aMeHHB ,n,jiHHHyio jj,ecflTHHHyio ,a,po6b Ha 

HeCKOJIbKO KOpOTKHX (KOTOpbie y>Ke MffiKHO H3MepaTb) . HTO-TO OCMblCJieHHOe MCOKHO 

BOo6pa3HTb fljia Sojibinnx CHCTeM Tnna jia3epoB hjih KOH^eHCHpoBaHHbix coctohhhh, 
r/j;e OTflejibHbiMH coctohhhhmh mojkho npeHeSpenb. Ho pa3JiojKeHHe Ha mhokhtcjih c 
noMombio KBaHTOBbix KOMnbiOTepoB cymecTBeHHO Hcnojib3yeT SKcnoHeHHiiajibHoe hhcjio 
rjiySoKO HHflHBH^yajibHbix coctohhhh. MHe Tpy^HO npe^CTaBHTb, neM b TaKofi cnTyainin 
mojkho 3aMeHHTb oSmee h npnMoe npe/j,CTaBjieHne aMnjinTya, c HeBOo6pa3HMOH tohhoctbio, 
pa3Be hto c^ejiaB hx 6ojiee "cpH3HHecKHMH" 3a cneT Bbi6opa MeHee (|>H3HHecKoro 6a3nca. 
PaccMOTpHM 3tot no/xxo/j; 6ojiee nojjpo6HO. 

2.5. KaK Majia BcejieHHaa. Ctopohhhkh KBaHTOBbix KOMnbiOTepoB nacTO roBopaT, 
hto TaK hjih HHane mm 6yjj;eM b BMHrpbinie: yijacTca jih6o c;j;ejiaTb paGoTaiomiift KBaHTOBbifi 
KOMnbiOTep, jihSo yTOHHHTb 3aKOHM KBaHTOBOH MexaHHKH. HanpHMep, n. HJop B [18j 
roBopHT: 

Ecjih b KBaHTOBOH MexaHHKe HMeiOTca HejinHeimbie 3(p(peKTM, KOTopbie mox- 
ho o6Hapy»<HTb, Ha6jiiojjaa 3a HencnpaBHoii pa6oTOH KBaHTOBbix KOMnbiOTepoB, 
4)H3hkh BECbMA 3anHTepecyiOTca hmh (a 6m ojKHjjaji HoSejieBCKon npeMHH 
3a ySejxHTejibHoe CBHjj;eTejibCTBO TaKHx 3(p(peKTOB). 

PaccMOTpHM, o^HaKO, flpyrofl BapnaHT: HaM yjjaeTca qzjejiaTb KBaHTOBbie KOMnbiOTepM 
H3 HecKOJibKHx Ky6nTOB, pa6oTaioiinie b cootbgtctbhh c Teopnen. C poctom nncjia Ky6nTOB, 
oflHaKO, TaKne KOMnbiOTepM cjj,ejiaTb Bee cjio>KHee, h nporpecc ocTaHaBjiHBaeTca 3ajj,ojiro 
,n;o Toro, KaK KBaHTOBbie BbiancjieHHa cnoco6HM conepHHaaTb c BbiancjieHHaMH Ha oSopoTe 
CTaporo KOHBepTa. nosTOMy pa3JiaraTb Sojibnrae nncjia Ha mhojkhtcjih mm He mojkcm. 
Mojkho jih xoTa 6m npeTeHjj,OBaTb Ha 6ojiee hjih MeHee flocToimyio npeMHio 3a nonpaBKH k 
KBaHTOBOH MexaHHKe? 

OflHaKO HarpajKjjaiomHH komhtct 3axoneT yBH^eTb HTO-HH6yjj,b Sojiee KOHKpeTHoe, neM 
npocTO Hepa6oTaiOHi,HH KOMnbiOTep, - HanpHMep, aBHoe yKa3aHne cocToaHHa, b kotopom 
oh HaxoflHTca. Ho Bcex pecypcoB BcejieHHoii OKa3MBaeTca He/j;ocTaTOHHO, hto6m H3MepHTb 

Heo6xOJj;HMOe HHCJIO KOOp^HHaT C Heo6xO,H;HMOH TOHHOCTbK). (OcTaeTCH JIHHIb HafleHTbCH Ha 

Ho6ejieBCKyio npeMHio no SKOHOMHKe, ecjin y^acTca coSpaTb ^eHbrn, HeoSxo/XHMbie JiJia 

pa3JIO>KeHHH nHTH3HaHHMX HHCejI Ha MHOJKHTejIH C nOMOIHblO KBaHTOBMX KOMnbiOTepoB!) 

C^ejiaeM HeKOTopbie ohchkh, o6o3Hanan nepe3 ~n HeSojibnine CTeneHH nncjia n. 
y KpnnTorpacpOB nncjia, nojiJiOKamne pa3JiO)KeHHio Ha mhokhtcjih, MoryT HMeTb tmchhh (a 

JierKO B03MOJKHM H MHJIJIHOHbl) 6HTOB. HpOCTpaHCTBO COCTOHHHH H pa3MepHOCTH 2~ n HMeeT 

npHMepHO 2 2 ™ noumu opToroHajibHbix ^pyr flpyry BeKTopoB. PaccMOTpHM sjieMeHT v G H 
o6ni,ero nojio>KeHHa (6yjj,eM Ha3MBaTb TaKne BeKTopM "MeracocTonHHnMn") . MnHHMajibHbin 
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pa3Mep MaiiiHHbi, KOTopaa mojkct nopo^HTb hjih pacno3HaTb v, HMeeT nopa^OK K = 2~ n - 
SHa^HTejibHO Sojibine, neM BcejieHHaa. B caMOM ,a,ejie, ,a,ocTaTOHHO nocHHTaTb ManiHHbi 
H3 K aTOMOB: hx npiiMepHO 2~ K . 

EcTb npHHn,HnHajibHaa pa3HHn,aMH Memjiy He Ha6jno,zraBHiHMHCfl h npHHininHajibHO 
HeHaSjiioflaeMbiMH BemaMH. yTBepx<,neHHH npo OT^ejibHbie MeracocTOHHHH HeHaSjno^aeMbi. 
Mojkho npe^CTaBHTb ce6e cnocoS OTJiHHHTb flBa MeracocTOHHHH dpys om dpysa, ho - KaK 
noKa3biBaiOT c^ejiaHHbie oueHKH - HeT bo3mox<hocth OT^ejiHTb flaHHoe cocTOHHne (oSmero 
nojio>KeHHa) ot Bcex ^ajieKHx ot Hero c toh CTeneHbio tohhocth, KOTopaa cymecTBeHHa 
fljia noBe^eHHa KBaHTOBoro KOMnbiOTepa. KaKoii, b TaKOM cjiynae, SKcnepnMeHT MoaceT 
no^TBepflHTb npaBHJibHoe cocTOHHne KBaHTOBoro KOMnbiOTepa? (/lance MbicjieHHbiii - b 
npeflnojioa<eHHH, hto mm nojib3yeMca pecypcaMH Been BcejieHHOii, ho He 6oAee\) 

Eme Apxniviefl OTKpbiJi, hto HHcppoBan cpopivia npe,ncTaBJieHHH anceji SKcnoHeHHiiajibHO 
3(p(peKTHBHee aHajioroBoii (Ryan necKa). BnocjieflCTBHH pa3JiHHHbie aHajioroBbie ycTponcTBa 
pe^KO OKa3biBajiHCb BneaaTjiaiomHMH. HeacHO, noaeMy KBaHTOBbie KOMnbiOTepbi ^oji>KHbi 
6biTb HCKjnoaeHiieM. 

2.6. MeTpHKa hjih TonojiorHH? ToBopa o npaSjiHJKeHHax k coctohhhhm CHCTeMM, 
mm o6Hapya<HBaeM, hto b KBaHTOBofi MexaHHKe OTcyTCTByeT a^eKBaTHbia (popMajni3M. 
EcTb TOHKoe pa3JiHaae Meatfly npH6jin>KeHnaMn b CMbicjie MeTpnKH a Tonojioraa. MeTpaxa 
roBopaT o tom, HacKOJibKO OflHO (xoponiee) cocToaHae 6jih3ko k cneinicpHHecKOMy flpyroMy 
(njioxoMy). Tonojioraa HMeeT ^ejio c 6jiH30CTbio xoponiero cocToaHHa k coaeTaHHio Bcex 
HenpneMJieMbix ( a He OKpecTHbix") coctohhhh, h sto He o6a3aTejibHO to ace caMoe, hto 
paccTOHHne ap SjiHJKaiiHiero njioxoro coctohhhh, ocoSeHHO aaH KBaHTOBbix CHCTeM. 

B SecKOHeaHOMepHbix npocTpaHCTBax ecTb pa3Hbie cnocoSbi OTjinaaTb KOHeaHyio 
pa3^ejieHHOCTb tohkh h MHoacecTBa ot HyjieBoii (pa3Hbie TonojiorHn). B KOHeaHOMepHOM 
cjiyaae c (popMajibHoii tohkh 3peHHH TaKoro pa3JiHana HeT: Bee TonojiorHH coBnaaaiOT. 
O^HaKO HHCJia nopaflKa 2 500 mohcho caHTaTb KOHeaHbiMH Jinnib b BecbMa cpHJiococpCKOM 
CMbicjie, h SbiJio 6bi HcejiaTejibHO BBecTH HeKoe noHHTHe cjiaSoTonojiorHaecKOH zjiy6uHu 

OKpeCTHOCTH, nOJIHHOMHajIbHO CBH3aHHOe C pecypcaMH, HeoSxOflHMblMH flJIH aOCTHHteHHH 

3Toa rjiySaHbi. IlpH stom ToaHOCTb, cooTBeTCTByiOHraa pa3yMHoii rjiySnHe, apjia<Ha 

6bITb (J)H3HaeCKH aOCTHHCHMOH (b03MOH<HO nOpOHtaaTb TOHKH BHyTpH COOTBeTCTByiOIHeH 
OKpeCTHOCTH, OTflejIHTb HeHTp OKpeCTHOCTH OT TOHeK, B Heft He JieHCaiHHX, H T.fl.). 

HMeH (pyHKHHK) paCCTOHHHH, Mbl MOHCeM rOBOpHTb 06 £-OKpeCTHOCTHX (HTO HeB03MOH<HO 

b TonojiorHH, rae KOHKpeTHoe 3HaaeHHe e OTcyTCTByeT, H3BecTHO Jinnib cymecTBOBaHne 
HeKOToporo e > 0). OaHaKO e-OKpecraocTH b MeTpnaecKHx npocTpaHCTBax HeH36ea<HO 
oSaaaaiOT TaKHM cbohctbom (KOTopoe moxho Ha3BaTb "aKCHOMOH nepeceaeHHa") : 
nepeceneHne jnoSoro MHoacecTBa e-OKpecTHOCTefi (npn aaHHOM e) ecTb e-OKpecTHOCTb. 

TOBOpfl O 6JIH30CTH B npOCTpaHCTBe COCTOHHHH KBaHTOBOH CHCTeMM, MM MOJKeT 3aXOTeTb 

H3MepHTb rjiySnHy OKpeCTHOCTH hhcjiom, He no^HHHHHCb aKCHOMe nepeceHeHHH. Bot 
npHMep TaKoro poaa H3MepeHHH (He npeTeHayioiHHH Ha npnroaHOCTb a,jia Haninx Hejieii). 
ilpeflnojioJKHM, hto OKpecTHOCTb HyjiH 3aaaeTca CHCTeMoii jiHHeimbix HepaBeHCTB fi(x) < 1; 
Torfla ee rjiySnHoii CHHTaeTCH hhcjio xoth orpaHnneHHe tohkh x ccpepon c 

i 

rnjibSepTOBOH HopMoii 1 cflejiajio 6m 3Ty rjiySnHy KBaflpaTHHHO CBH3aHHOH c pa^nycoM 

OKpeCTHOCTH. 

B03M0>KH0, HTO Sojiee OCMMCJieHHMH C TOHKH 3peHHfl (pH3HKH nOflXOfl MffiKHO 
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nojiy^HTb, ecjin yHHTbraaTb HajiHHne cneHiiajibHoro 6a3nca (cocTaBJieHHoro H3 TeH3opHbix 
npoH3Be^,eHHii) . 

2.7. He npo^eineBHTb! Pa3Jio)KeHHe Ha mhojkhtgjih c homohtbio KBaHTOBbix 
KOMnbiOTepoB Ka>KeTca MHe HaynHoii (paHTacTHKoii . Mo>kho jihhib co>KajieTB, hto b 
nonyjiapHbix o63opax oho He OT^ejiaeTca ot Sojiee peajiHCTHHHbix npefljio>KeHHH - KBaHTOBoii 

KpHnTOrpa(pHH, KBaHTOBOH HHCpOpMaHHH, a TaKJKe KBaHTOBblX BMHHCJieHHH, B KOTOpblX 

cymecTBeHeH HejiOKajibHMH flocTyn k HHcpopMaHHH (Hanpniviep, Smctpmh noncK b Sojibhihx 
MaccHBax). 

Cjie^yeT otmcthtb T&Kme, hto (pyH^aMeHTajiBHbie npnnHHM, npenaTCTByiomHe paSoTe 
KBaHTOBbix KOMnbiOTepoB, onpe^ejieHHO He acHbi h 3acjiyjKHBaiOT cepbe3Horo H3yneHHa. 
Ilojib3a ot Hero MoaceT 6biTb Sojibine, neivi Bca MbicjiHMaa nojib3a ot SbiCTporo 
pa3JiojKeHHa Ha mhojkht6jih. ripe^CTaBbTe ce6e, hto 3HaivieHHTbiH fleMOH MaKCBejuia b CBoe 
BpeMa peKjiaMHpoBajica 6bi KaK nepcneKTHBHbin cnocoS nojiyneHna sjieRTposHeprnn H3 
OKpyataiomero Tenjia! BepoaTHO, b TaKOM cjiynae coBpeMeHHaa TepMO^HHaMHKa noaBHjiacB 
6bi 3aMeTHO no3>Ke. 

B ocTaBHienca nacTH CTaTbH mm He pacciviaTpHBaeM SKCTpaBaraHTHbie MO^ejin 
BbiHHCJieHHii h TBepflo npHflepjKHBaeivica "nojiHHOMnajibHoro Te3nca Hepna-TbiopHHra": 
jiioSoe BbiHHCJieHHe, TpeSyionjee t TaKTOB paSoTbi s-6nTOBoro ycTpoiicTBa, moxho 
MOflejinpoBaTB Ha ManiHHe TbiopHHra 3a s°^H niaroB c naMATBio s ^\ 

3 IIo^boxh ycpe^HeHHa 

CaMa no ce6e TpyzrnocTB o6pam;eHHa cpyHKHHH b xy,a,HieM cjiynae (Ha caMOM TpyzrnoM 
Bxofle) eme Majio nTO 3HanHT. npe^CTaBHM ce6e, HanpHMep, hto Bee Bxoflbi ^ejinTca 
Ha "jierKne" n "TpyzrHbie". Jlerxne bxo^bi x TpeSyiOT BpeivieHn ||a;|| 2 fljia o6pa6oTKn; 
a TpyflHbie - SKcnoHeHHiiajibHoro cpeflHero BpeMemi nan 3ah o6pa6om,Ku, mat; u 3jih 
naxoMcdenuH BepoaTHOCTHbiMH ajiropHTMaMH. B TaKOM cjiynae BcejieHHaa cjihhikom Majia, 
nToSbi nopoflHTb npniviep, kotopmh mm He MO>KeM peniHTb, h oSpameHHe (pyHKiniii He 
npe^CTaBjiaeT TpyzrHOCTeii Ha npaKTHKe. 

Ha npaKTHKe Ba>KHa TpyzrnocTb o6paiu,eHHa b "thhhhhmx cjiynanx". HMeHHO OHa MeniaeT 
pa3pa6oTHHKaM ajiropHTMOB h ^ejiaeT bo3mo>khmmh pa3Hbie KpnnTorpacpHHecKHe nyzjeca. 
Ho KoppeKTHoe onpeflejieHne "thhhhhocth" - Benrb ^obojibho TOHKaa. 

3.1. Las Vegas-ajiropHTMM. npejK^e Bcero Ha^o ^oroBopHTbca o cnocoSax H3MepeHHa 
"scpcpeKTHBHOCTn" ajiropnTMa oSpameHHn. AjiropnTM o6paiu,eHHa A(x, a) nojiynaeT Ha 
Bxofl 3HaneHHe x = f(w) o6pam,aeMOH cpyHKHHH / Ha HeKOTopoM hckomom w, a TaK>Ke 
nocjie^OBaTejiBHOCTB cjiynanHbix 6htob a G {0, 1} N . Ecjih penb H^eT 06 oSpameHHH, 
Kor^a mm MOJKeM npoBepHTb OTBeT noflCTaHOBKoii, HaM HeT HeoSxoflHMOCTH 3a6oTHTbca 
o HeBepHMx OTBeTax, h mojkho npe^nojiaraTb, hto ajiropHTM jih6o ^aeT BepHbifi OTBeT 
(o,hhh H3 npoo6pa30B sjieMeHTa x), jih6o He ^aeT HHKaKoro OTBeTa (bo3mo>kho, HHKor^a 
He OGTaHaBjiHBaeTca). TaKne ajiropnTMM Ha3MBaiOT Las Vegas-ajiropnTMaMH. 

3(p(peKTHBHOCTB paSoTM ajiropnTMa Ha flaHHOM npHMepe x H3MepaeTca ppyMn 
napaMeTpaMH: o6&eMOM V BMHHCJieHHa 3 h eepoMmHocmbw pv (oTHOCHTejibHO a) ycneniHoro 

3 Mm roBopHM "o6i3eM", a He "BpeMfl", iMea b Bmpy B03MOJKHbie MO,a;ejiH BbiHHCJieHHii c HeorpaHH^eHHbiM 
napajuiejiH3MOM . 
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oSpameHHH 3a V inaroB. 3th napaivieTpbi CBa3am>i flpyr c flpyroM: mojkho yBejiHHHTb 
BepoaTHOCTb ycnexa p 3a cneT noBTopeHna A npii pa3Hbix He3aBHCHMbix a; npn stom 
OTHOineHiie V/p (TOHHee — V/log(l— p)) MeHaeica Majio. IIosTOMy KaaceTca pa3yMHbiM 
(xaK 3to nacTO n ^ejiaeTca) cpnKcnpoBaTb 3HaneHne p n TpeSoBaTb, hto6m ajiropnTM 
BbiflaBaji BepHbiii otbct, CKa>KeM, c BepoaTHOCTbio 1/2 hjih Sojibine. OflHaKO npn stom 
B03HHKaeT TpyflHOCTb: oueHKa BepoaTHOCTH p h HeoSxoiTHMoro ancjia noBTopeHHH mojkct 
noTpeSoBaTb SKcnoHeHirnajibHoro oSteivia (b xyflineM cjryaae), h noTOMy HMeeT cmmcji 
roBopHTb jinnib o cpe^HeM o6T>eMe BMHHCJieHHH (flJia (pHKcnpoBaHHoii BepoaTHOCTH ycnexa). 
no^nepKHeM, hto ycpe^HeHHe BbinojraaeTca jiiinib no BHyTpeHHHM cjiynaHHMM 6nTaM (T.e. 
no a), bxo/j; x BbiSnpaeTca npoTHBHHKOM. Ilpn TaKOM no/rxo/ie flBa napaivieTpa jijih H3MepeHHH 

3(p(peKTHBHOCTH H3JIHIUHH; yBejIHHeHHH BepOJITHOCTH MOJKHO JIOCTHHb 3a CHeT yBejinaeHna 

cpe/iHero oSteMa h HaoSopoT (hto6m yivieHbniHTb cpeiTHHH oSteM, flocTaTOHHO BbinojiHHTb 
o6pam,eHHe jinnib c HeKOTopon Majion BepoaTHOCTbio). 

Mojkho noHTH flpyrnM nyTeM n HopMajin30BaTb He BepoaTHOCTH ycnexa, a cpeiiHHH 
oSteM BbiHHCJieHHH. Ilpn 3TOM mm H36eraeM HaKJia^Hbix pacxo^OB Ha oneHKy BepoaTHOCTH 
ycnexa h yMeHbnieHHH MO/ryjiapHOCTH H3-3a KOiviSHHHpoBaHHH HecKOJibKHx npHMeHeHHii 
ajiropHTMa. EcTb, oflHaKO, Sojiee BajKHbie apryivieHTbi b nojib3y TaKoro noirxoija: npe/iCTaBHM 
ce6e, Hanpniviep, hto pa3JinnHbie npoo6pa3bi flaHHoro 3HaneHna oflHOCTopoHHen (pyHKirnn 
HMeiOT pa3Hoe (h Tpy^HO cpaBHHMoe) "KanecTBo". OrpaHHHemra me cpe^Hero o6T>eMa 
BbiHHCJieHna HMeiOT Bnojme acHbin cmmcji. J\jih KOHKpeTHon MO^ejin BbinncjieHHH moxho 
(pHKcnpoBaTb 0(l)-rpaHHu;y jjjih oSteMa; ecjin me mm xothm paSoTaTb c pa3JiHHHMMH 

pa3yMHMMH MO/iejIHMH, MOJKHO OrpaHHHHBaTb CpeflHHH oSteM BMHHCJieHHH MHOrOHJieHOM 

ot jijihhm Bxojja (npn stom ,iijia pa3Hbix ajiropnTMOB mojkho 6paTb pa3Hbie MHoronjieHbi). 
TyT, o^HaKO, B03HHKaeT npenaTCTBne: MHoacecTBO ajiropnTMOB c flaHHMM orpaHnneHneM 
Ha cpejjHHH o6T>eM BMHHCJieHHH He aBjiaeTca peKypcnBHO nepenncjinMbiM. IIpeo;j,ojieTb 3Ty 
Tpy^HOCTb mojkho c noMOinbio cjie/Tyiomero noirxoija, rapaHTHpoBaHHO orpaHHHHBaiOHiero 
cpe/iHHH oSteM BbinncjieHHii. 

Onpe^ejieEie 1 Las Veg&s-aAsopumM A(x, a) U3 KAacca LV(6) HauuHaem pa6omy, 
3Ha,H 3apanee zpanuuy b(x) na donycmuMUU o6veM eunucAenuu. IJpu smoM e jik>6ou 
MOMenm aAsopumM UMeem npaeo nocmaeumb "na koh" Aw6yto nacmb ocmaemesocH o6neMa; 
ecAU oh npompueaem (nmo onpedeAHemcn CAedywmuM CAyuauHUM 6umoM a), mo ama 
nacmb nponadaem, ecAU cnce oh eumpueaem, mo ona ydeaueaemcn. 06uhho docmamouno 
paccjuampueamb kao.cc LV(0(1)), Komopuu mm o6o3HauaeM npocmo L. 4 

HecMOTpa Ha >KecTKoe 0(l)-orpaHHneHHe, L-ajiropnTMM ^ocTaTOHHO npeflCTaBHTejib- 
hm: jiioSoh Las Vegas- ajiropnTM moxho npnBecTH k Bn^y H3 L, coxpaHaa (b ochobhom) 
OTHonieHHe uem^y cjio>KHOCTbio h BepoaTHOCTbio ycnexa. Ecjih p - BepoaTHOCTH ycnexa 
^;jih L-ajiropHTMa, BejiHHHHa 1/p cooTBeTCTByeT nncjiy noBTopeHHii, HeoSxoflHMOMy fljia 
^ocTHJKeHHH ycnexa c (pHKcnpoBaHHOH BepoaTHOCTbio, h noTOMy nrpaeT pojib BpeMeHH 

4 3to "L" mojkho npoH3HOCHTb Kax "Las", HMea b BH^y Las Vegas, a Taxace Laszlo Babai (kotopmh 
npii,n,yMa.n Ha3BaHiie "Las Vegas-ajiropHTMbi") . IIo^HepKHeM, ^to pe^b He H^eT 06 onpe^ejieijira o^epe^Horo 
cjiojKHOCTHoro KJiacca: mm onucbiBaeM HeKOTopyio onpe^ejieHHyio $opMy ajizopumMoe, a He KJiacc 
ajiropnTMOB hjih (^to eme 6ojiee a6cTpaKTHo) Kjiacc sa^a^, pa3peniHMbix c noMombio ajiropnTMOB 
HeKOToporo KJiacca. Otmgthm, ^to no cymecTBy Tpe6oBaHHe L He flBjiaeTCfl oco6eHHO hobhm: oho 
npe,a;cTaBjifleT co6oii jinnib He6ojibnioe ycnjieHne o6meH H^en Las Vegas-ajiropHTMa. 
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paSoTbi ajiropiiTMa. Llpn stom HHTaTejib, He ^KejiaioiniiH B^aBaTbca b fleTajin BHyTpeHHero 
ycTpoHCTBa KOMnbiOTepoB, MOJKeT npiiH3Tb L-ajiropHTMbi KaK HeKyio ^aHHOCTb n Becb 
^ajibHeiiiiiHH aHajiH3 npoBO^HTb HCKjiionHTejibHO b TepMrmax Teopiiii BepoaTHOCTeii! 

3.2. Ou;eHKa BpeMemi b TepMHHax MyjibTHMe^naH. HaM ocTajiocb pa3o6paTbca 
c Sojiee cjiojkhoh npoSjieMOH - ycpe^HeHneM no bosmojkhbim BxoflaM x. OnpeflejieHne 
cjio>khocth KaK cpe,a,Hero 3HaneHHa E x t(x) (flJia ajiropHTMa, ^ejiaiomero t(x) inaroB Ha Bxo^e 
x) BecbMa HeycTOHHHBO. B caMOM ^ejie, npn nepexo^e ot o^hoh BbiHHCJiHTejibHOH mo^jih 
k flpyroM BpeMa paSoTbi mojkct B03BecTHCB b KBa^paT. TaKOBa CHTyanna, HanpHMep, c 
pacno3HaBaHHeM chmmctphh Bxofla: Ha oflHOJieHTOHHoii MaiHHHe oho TpeSyeT KBaflpaTHHHoro 
BpeivieHH, a Ha ^ByxjieHTOHHOH ,u;ocTaTOHHO jiHHeiiHoro. IlpeflCTaBHM ce6e, hto no^oSHaa 
CHTyanna hmcgt MecTO fljia 3HanHTejibHO Sojiee Me^JieHHbix ajiropnTMOB. LlycTb, HanpHMep, 
BpeMa t(x) paSoTbi ajiropHTMa paBHO ||a;|| 2 pjin Bcex bxo^ob, KpoMe cocToamnx H3 o^hhx 
Hyjieii, a rjisi x = 0™ paBHO 2 n b o^hoh MO^ejin BbinHCJieHHH h 4 n b flpyron. By^eM cnnTaTb, 
hto Bee 2™ bxo^ob flaHHoii fljiHHbi n paBHOBepoHTHbi. Torfla cpe^Hee 3HaneHne E x t(x) 
Sy^eT nojiHHOMnajibHbiM b o^hoh MO^ejin h SKcnoHeHHiiajibHbiM b flpyroii: ycpe^HeHne 
He KOMMyTHpyeT c B03Be,a,eHHeM b KBa^paT. K TOMy me 3Ta SKcnoHeHiniajibHaa oneHKa 
cjio>khocth Ha cpe^HeM Bxofle He HMeeT npaKTHnecKon neHHOCTH, nocKOJibKy BepoaTHOCTb 
noaBjieHHa cjio>KHoro Bxo^a npeHe6pe>KHMO Majia. 

Bojiee HHBapHaHTHOH Mepoii cjiojkhocth BbinncjieHHa Morjia 6bi cjiy>KHTb Meduana 
BpeMeHH BbinHCJieHHH Ha cjiynanHOM Bxo^e, T.e. MHHHMajibHoe hhcjio niaroB, ^ocTaTOHHoe 
fljia o6pa6oTKH jnoSoro H3 6oAee caochchou noAoeunu bxo^,ob. 3Ta Mepa, o,a,HaKO, 
HeycToiinHBa b flpyroM CMbicjie: OHa MO>KeT Kap^HHajibHO H3MeHHTbca, ecjin noAoeuny 
HanSojiee cjiojkhmx bxoaob 3aMeHHTb, CKa>KeM, Ha uemeepmb. 

K cnacTbio, Hanie corjianieHne o Las Vegas-ajiropnTMax 3aoflHO peniaeT n 3Ty 
npoSjieMy. J\jih npoH3BOJibHoro L-ajiropnTMa mbi mojkbm H3MepnTb BepoaTHOCTb ycneniHoro 
oSpameHHa Ha cjiynafiHOM Bxofle (nMeiomeM 3a^aHHoe pacnpe^ejieHHe BepoaTHOCTeii). 
OSpaTHaa BejinnnHa k stoh BepoaTHOCTH (KaK cpyHKHiia, CKajKeM, ot pa3Mepa Bxofla) 
HBJiaeTCH pa3yMHoii Mepoii cmounocmu oflHOCTopoHHeii cpyHKHHH. TaKaa Mepa xoponia 
fljia KpnnTorpacpHH, r^e CTaBHTca nejib npe,n,OTBpaTHTb b3jiom nincppa ^a>Ke n c Majion 
BepoaTHOCTbio. B 3aflanax, r^e TpeSyeTca ^ocTHHb ycnexa Ha nonTH Bcex Bxo^ax, HeoSxo^HM 
,a,pyroH noflxofl. 

OnpeflejieEie 2 IJycmb 3adano neKomopoe h-pacnpedejiemie na exodax (zoeopn o 
L-pacnpedejieHUHX, mu UMeeM e eudy pacnpedejienun na euxodax L-aAsopumMa c nycmuM 
exodoM) 5 . IIopoMcdaeM exod {no amoMy pacnpedeAeHuw) k pa.3, umo mpe6yem cpednezo 
epejueHU O(k), a 3ameM npuMenneM aAsopurriM o6paw i eHUH, nona He 6ydym naudenu 
npoo6pa,3u y ecex exodoe, 3ah Komopux ohu cymecmeywm 6 . Hucao nonumoK HeAHemcn 
CAynaunou eeAununou [saeucnwfiu om CAynaunux 6umoe, ucnoAb3yeM,ux e aAsopumMe 
o6paiu,eHUH, a manatee om CAynaunux 6umoe, ucnoAb3oeanHux npu nopoMcdenuu exodoe). 
Ee Meduana MT(fc) na3ueaemcH MyAbmuMeduanou epeMenu o6pavj,enuH f c noMompw 
aAsopumjua A. 

5 Ecjih pacnpeflejiemie Ha Bxcmax He ajiropnTMH^ecKoe, mojkho H3MeHHTb onpe^ejieHHe, 3aMeHHB b 
onpe,a;ejieHHH Kjiacca L cjiojkhoctb Ha fljiHHy Bbixo^a. ITpn stom Bxo,a;bi ,a;jiHHbi n ^onJKHbi HMeTb BepoaTHOCTH 
c cyMMoii n~° (1 \ HanpHMep, p(x) = l/(||x|| log||x||) 2 . 

6 Bxo,iibi, fljifl KOTopbix npoo6pa30B HeT, He yHHTMBaiOTCfl. 
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3Ta Mepa KanecTBa ajiropHTMa HMeeT paij; jtoctohhctb. OHa KOMMyTupyeT c B03BejxeHHeM 
b KBa^paT BpeMeHH pa6oTM h noTOMy ycTonnnBa OTHOCHTejibHO nepexojja k jjpyroii 
MOflejiH bbi^hcjighhh. Bbi6op rpaHHHM 1/2, no^pa3yMeBaeMOH MejinaHon, TaKxce He aBjiaeTca 
cymecTBeHHbiM. B caMOM ^ejie, yBejinneHne k b c pa3 cooTBeTCTByeT TaKOMy >Ke yBejinneHHio 
MT(fc) KaK h yMeHbnieHHe BepoaTHOCTii Heyjjann oSpameHHH 2~ c . 

BejiHHPma MT ocMbicjieHHa h jjjisi BepxHnx, h jijiji hhmhhx oneHOK. LlycTb t(x) BejiHKO 
fljifl £-jj,ojih bxojjob x G {0, l} n . Torjja MT(A;) ctojib me bcjihko ijjia k = n 3 /e. OSparao, 
nycTB MT(fc) BejiHKO. Torjja nonTH HaBepHaKa t(xi) ctojib me BejiHKO jijia HeKOTopBix H3 
n = k 2 cjiynanHbix bxo/xob x\, . . . ,x n (h ^ ||a;j|| = 0(n)). 

i 

3.3. IIpocTbie pacnpe,a;ejieHH5i. J\o chx nop mm ynHTMBajin BjiHSHiie cjiynaimbix 
6htob b BepoaTHOCTHOM ajiropHTMe Ha BpeMa paSoTbi (jjJia cpHKcnpoBaHHoro Bxo;ia), a 
TaioKe ycpejjHajin bto BpeMa no pa3JinnHbiM BxojjaM c cpHKcnpoBaHHMM pacnpe^ejieHneM 
BepoaTHOCTeii. Ceflnac mm o6cy;jHM BbiSop 3Toro pacnpe/xejieHHH, kotopmh JiajieKO He Bcer/ia 
npocT h OTHio^b He HcnepnbiBaeTCH ccmjikoh Ha "paBHOMepHoe pacnpe/xejieHHe". TaKne 
ccbiJiKH nacTO Jinnib 3anyTbiBaiOT flejio, nocKOJibKy pa3JiHHHbie pacnpeflejieHHH MoryT He 

6e3 OCHOBaHHH CHHTaTBCa "paBHOMepHBIMH ". 

HanpHMep, paccMOTpnM rpa(pbi G = (V,Ec V 2 ) c n BepniHHaMH (||V|| = n), r/xe 
3HaneHHe n BbiGnpaeTca c BepoaTHOCTbio c/n 2 (3,n;ecb c - HopMHpyioiHHH MHOJKHTejib) . Ha 
3tom MHOJKecTBe (npH ^aHHOM n) paccMOTpnM flBa pacnpe/xejieHHH, KOTopbie 3acjiyjKHBaiOT 
Ha3BaHna "paBHOMepHbix". IlepBoe H3 hhx, KOTopoe mbi o6o3HannM /ii, cjiynanHO n 

2 

paBHOBepoaTHO BbiSnpaeT rpacp G cpe/in Bcex 2 n rpacpOB. Pacnpe^ejieHne \ii cooTBeTCTByeT 
cjiynaimoMy paBHOMepHOMy Bbi6opy nncjia peSep k — \\E\\ b /iHana30He ot n 2 h 3aTeM 
cjiynaHHOMy paBHOMepHOMy BbiSopy E cpe/in C* 2 B03MOiKHOCTefi. Xoth o6a pacnpe^ejieHHa 
MoryT 6biTb Ha3BaHbi paBHOMepHbiMH, ohh pajjHKajibHO OTJinnaiOTCH. HanpHMep, mhojkcctbo 
{G : \\E\\ = ra 1 ' 5 } HMeeT BeposTHOCTB npnMepHO 1/n 2 OTHOCHTejibHO fi2, xoth ero 

BepOaTHOCTB OTHOCHTejibHO /ii SKCnOHeHHHajIbHO Majia. 

B onpeio;ejieHHOM CMbicjie Bee "npocTbie" pacnpeirejieHHH BepoaTHOCTeii mojkho CHHTaTb 
paBHOMepHbiMH. Mm npHBeia;eM cooTBeTCTByiomee paccyjK/xeHHe (KpaTKO HaMeneHHoe b [19j) 
c HeKOTopbiMn jj,o6aBjieHnaMH, HyjKHbiMH jjjisi jjajibHeninero. 

OTO»cjj;ecTBHM (KaK 3to flejiaiOT b TeopHH mhojkcctb) KajKfloe HaTypajibHoe hhcjio n c 
MHOJKecTBOM MeHbHiHx HaTypajibHbix HHceji {0,l,2,...,n — 1}. Mepofi mm 6yjxeM Ha3MBaTb 
aia;ia;HTHBHyio Bem;ecTBeHH03HaHHyio cpyHKHHio Ha MHoencecmeax HaTypajibHbix nnceji. B 
cooTBeTCTBHH c HaniHM corjianieHHeM n(n) = /x({0})+/x({l}) + . . .+/i({n— 1}); TeM caMMM \x 
npeflCTaBjiaeT coSoh MOHOTOHHyio (fiyHKi^uw pacnpedeAenun. CooTBeTCTByiomafl nAomHocmb 
pacnpeio;ejieHHH 3aia;aeTCH (popMyjioii n'(n) = u.(n + 1) — /^(n) = jj({n}); BejinnnHa n'(n) 
ecTb BepoHTHOCTb o/iH03JieMeHTHoro MHOxcecTBa {n} (a He n KaK MHOJKecTBa MeHbninx 
HaTypajibHbix nnceji). Hepe3 Q2 o6o3HanHM MHOxcecTBO KOHenHbix jj;bohhhmx flpoSeii 
i/2" 1 " G [1/2,1). Mm OKpyrjiaeM 3HaneHHa (pyHKii,HH fx jjp sjieMeHTOB Q2, coxpaHaa jihhib 

MHHHMajIbHO HeoSxOflHMOe HHCJIO JJ,BOHHHMX HH(pp (laK, HT06bI BepOHTHOCTb H3MeHHJiaCb He 

Sojiee neM b KOHCTaHTy pa3). 

Onpe^ejieHHe 3 Foeopsmi, umo $yHK , u ) utt fi: N — > Q2 BnojiHe OKpyrjieHa, ecjiu u.(x) 
H8.fiHemcn Kpamuauuieu deouHHoil dpo6bw e unmepeajie (fi(x — 1), + 1)), a maKcnce 
-\og^{x}) = 0(\\x\\). 
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Ilocjie^Hee ycjiOBiie jj;o6aBJieHO /iJia y^oScTBa; ero mojkho oSecneaHTb, CMeinaB 
(MOHOTOHHyio) (pyHKirnio /i c KaKHM-Hn6yflb npocTbiM pacnpe^ejieHHeM. 

Jl e m m a 1 Bchkclh guhucjiumclh (fiyHKi^UM fi : N — > Q2 Moofcem 6umb acficfieKmueno 
npeo6pa3oeaHa eo enojme onpysAeHHyw tfiyHKyuio /ii, euHUCAUMyw c 3aMedAeHueM (no 
cpaeneHUKi c fi(x)) e \\x\\ pa3. IIpu amoM, ecAU /i MonomoHHa (m.e. u.' > 0), mo n\ > /i'/4. 

Mohotohhoctb o6ecneaHBaeTca cpaBHeHaeM c n(y) AJia Bcex y, aBjiaiomirxca 

HaaajiaMH x G Q2- /Jajiee yTBep>KfleHHe jieMMbi ,a,ocTHraeTca 3a caeT OKpyrjieHaa. CHaaajia 
mm OKpyrjiaeM ji{x) ro KpaTaaaHieii aboh^hoh ,irpo6H p, KOTopaa 6jiHace k fi(x), neu k 
jiio6oMy flpyroiviy n(y); sth OKpyrjieHHbie 3HaaeHna mm Ha3MBaeM mouKaMu. 3aTeM Haxo^HM 
Bee meAu, T.e. 6jimKaHinne k p /xBOHHHbie jxpo6h Bcex MeHbinnx jxbohhhmx jijihh. 3aTeM jj;jia 
Ka>K^oii mejiH (b nopa^Ke B03pacTaHaa ^jiHHbi) Haxo^HM TOHKy, KOTopaa ee 3anojiHaeT npn 
nocjie^OBaTejibHbix OKpyrjieHaax; Tax ^ejiaeTca ,a,o Tex nop, noxa mejib fljia x He 6y^eT 
HaiifleHa. 

BnojiHe OKpyrjieHHbie cpyHKHHH /x o6jiaflaiOT jhoSohmthmm cbohctbom: 06a ancjia 
m(x) = fi(x) / ]i({x}) h — log/i({x}) = ||m(a;)|| Bcer^a uejibie, h noTOMy u.(x) ecTb 
KOHeaHaa ^BoaaHaa ,zrpo6b, y kotopoh uejiaa aacTb HyjieBaa, a nocjie 3anaTofl a,a,eT mix). 
IlosTOMy m pacnpe^ejieHO noaTH paBHOMepHo: 2ku.(m~ 1 (k)) G [1,2] apa k G m(N). KpoMe 
Toro, oho BbiaacjiHMO 3a nojiHHOMHajibHoe BpeMa, Tax ace k&k a m _1 (^BoaaHbiH noncx). 
CjieflOBaTejibHO, m(x) mojkho paccMaTpHBaTb kbr ajibTepHaTHBHoe npeflCTaBJieHne /iJia x, b 
kotopom pacnpe^ejieHne \i CTaHOBHTca flocTaTOHHO paBHOMepHbiM. 

BooSme roBopa, He Bcerjja mojkho orpaHnanTbca npocTbiMH pacnpeflejieHHaMH Ha 
Bxo,i],ax. Bo3mo>kho, HCxo^Hbie ^aHHbie r, Hcnojib30BaHHbie npn nocTpoeHHH Bxofla x, h HMejiH 
npocToe pacnpe^ejieHHe, ho caM npouecc A npeo6pa30BaHHa r b x mot 6biTb aeM-TO Bpo^e 
o^HOCTopoHHea cpyHKHHH. Mm MOJKeM npeflnojiaraTb, hto A ecTb ajiropiiTM c He cjihhikom 
6ojibHiHM BpeivieHeM pa6oTbi, ho He hto pacnpeflejieHne BepoaTHOCTeii Ha ero Bbixo^ax 
npocTO. Bo3HHKaiOHi;ee Ha Bbixo^e A pacnpeflejieHne Ha3biBaeTca peaAU3yeMUM (samplable) . 
B [20J Taxae pacnpe^ejieHaa CBO^aTca k paBHOMepHbiM, Tax me KaK a paccMaTpaBaeMbie b 
flaHHOM nyHKTe, xoTa a c noMonrbio flpyroro Tpioxa. 

4 IIojiHOTa 

4.1. IIojiHbie pacnpe^ejieHna h HHBepTopbi. Hto 3HaaHT, hto /jaHHaa cpyHKHHH Tpy^Ha 
fljia o6pam,eHaa? 3to mo>kho yToaHHTb ^BoaKO. Mo>kho caaTaTb (pyHKH,aio Tpy^Hoa, ecjin 
Tpy^Hbie fljia o6paiu,eHHa 3HaaeHHa aopoac^aiOTca c He cjihhikom Majioa BepoaTHOCTbio. 
A Moa<HO Tpe6oBaTb 6ojibniero: htoGm BepoaTHOCTb nojiyaeHna jierKoro fljia o6pam,eHaa 
3HaaeHna 6biJia npeHe6pea<HMO Majia. CymecTByiOT pa3JiHHHbie cnoco6bi CBecTH o^Hy 3ajj;aay 
k flpyroii, h mm 6yjj;eM paccMaTpHBaTb nepByio H3 ynoMaHyTbix 3ajj;aa. 

Ilpeaifle Bcero otmcthm, hto jieMMa no3BOJiaeT nepeaacjiaTb Bee BbiaacjiaMbie 3a BpeMa 
t(x) pacnpeflejieHHa, coxpaHaa t c ToaHOCTbio flo jiHHeaHoro MHoaiHTejia. CjioacHB Bee Taxae 
pacnpe^ejieHHa c K03(p(pHH,HeHTaMH, o6pa3yiOHi,HMH cxoflamniica pa^ (HanpnMep, 1/i 2 ), 
mm nojiyaHM pacnpejj;ejieHHe b KJiacce TIME(£(x)||x||), aBJiaiomeeca nojiHMM ^;jia KJiacca 
TIME(t(x)). Mojkho 6mjio 6m coe^HHHTb pacnpeflejieHna Bcex cjioacHOCTeii b ojo;ho, npn 
3tom Kaa<floe 3HaaeHne nopoac^aeTca c TeM MeHbHieii BepoaTHOCTbio, aeM Sojibnie cjioa<HOCTb 
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ero nopojKfleHHa (kbr sto ^ejiajiocb b n. 3.1). Ho mm npe,zrnoHHTaeM hmctb flejio npaMO c 
peajin3yeMbiMn pacnpe,a,ejieHHHMH. 

Onpe^ejieEie 4 PacnpedeAenuu eepoHmnocmeu na euxode L-aAsopumMoe 6e3 
exoda na3ueawmcH peaAU3yeMUMU. Ahciaosuhhum o6pa30M L-aAsopuniM co exodoM 3adaem 
peaAU3yeMoe ceMeucmeo pacnpedeAenuu (exod neAHemcn napaMempoM) . 

06mhho jjaeTca MeHee orpaHHHHTejibHoe onpe,n;ejieHHe, paspeHiaiomee Sojibinnfi KJiacc 
ajiropHTMOB (6ojiee 6jih3khh k LV c nojiHHOMHajibHMM orpaHHneHHeM) h nojiHHOMiiajibHO 
66jibniHe BepoaTHOCTH; mm paccMaTpiiBaeM jihbib L-ajiropHTMM, CTpeMacb k Sojibnieii 

TOHHOCTH. 

ripeflJioxeHHe 1 Cyu^ecmeyem noAnoe (nau6oAbiuee c moHnocmbto do 
nocmoHHHOzo MnomcumeAtt) peaAU3yejuoe ceMeucmeo pacnpedeAenuu. 

B caMOM jj,ejie, L-ajiropiiTMM mojkho BepenncjiflTB, h BOJiBoe peajiH3yeMoe ceMeiicTBO 
pacBpe^ejieBBH mo>kbo nojiyniiTB, BBi6Hpaa cjiy^aHBBin L-ajiropHTM h BBiBOJisaa ero. 
OniicaHHMH ajiropHTM Tpe6yeT b cpe^HeM BpeMeHH 0(1) h HMeeT He MeHbnie niaHCOB 
(c TOHHOCTbio flo nocTOHHHoro MHOJKHTejia) nopoflHTb "ciopnpH3", neM jhoSoh flpyrofi 
L-ajiropHTM. (y LV-ajiropHTMOB c nojiiiHOMiiajibHMM orpaHHHeHHeM bcpohthoctb "He- 
npnflTHoro ciopnpH3a" MoaceT 6biTb SojiBHie, neM y onncaHHoro ajiropnTMa, ho pa3JiHHHe 
He 6ojiee neM nojiHHOMHajibHO.) 

IlojiHoe pacnpe^ejieHHe onpejxejieHO Jinnib c TOHHOCTbio jxo orpaHiineHHoro mhokhtcjih , 
nosTOMy TOJibKO b jiorapncpMHHecKOH HejiOHHCJieHHoii niKajie oho jjaeT o6teKTHBHyio Mepy 
Tpy^HOCTH nona^aHHa b MHOJKecTBO X npn flaHHOM 3HaneHHH napaMeTpa x, onpe^ejieHHyio 

C TOHHOCTBK) JJ,0 OrpaHHHeHHOrO HHCJia ^ejieHHH HIKajIM. 

O 6 o 3 h a m e h h e. Hepe3 Kl(X/x) mm o6o3HanaeM — \og 2 p(X/x), rjj,e p(X/x) ecTb 
BepoHTHOCTb nonajjaHira b mhojk6ctbo X OTHOCHTejibHO nojiHoro ceMeficTBa peajiH3yeMbix 
pacnpeflejieHHH c napaMeTpoM x. 

KaK nacTO 6biBaeT, cpejiCTBO jijih aTaKH noMoraeT HaflTH h 3arniiTy. OnTHMajibHbie 
ajiropHTMM noHCKa (yKa3aHHbie b |21[ [22, 23J) npn HanieM onpe^ejieHHii nojiynaiOTca 
caMH coSoh: hojihmh reHepaTop TpyflHbix 3a^an npeBpanraeTca b onTHMajiBHMH ajiropiiTM 
hx penieHHa. HanoMHHM, hto mm "KOHBepTiipyeM" BpeMa pa6oTM b BepoaTHOCTb ycnexa, 
nepexojiH k L-ajiropiiTMaM, h H3MepaeM hx npoH3BOJTiiTejibHOCTb btoh BepoaTHOCTbio. 
AjiropHTM, nopojKflaioiHHH HaH6ojibHiee peajiH3yeMoe pacnpejiejieHHe (c napaMeTpoM x) 

HMeeT HaH60JIbHiyK) (c TOHHOCTbK) JJ,0 nOCTOflHHOrO MHO>KHTejIH) BepOflTHOCTB l/S(f/x) = 

2~ K1 (/ ( x )/ x ) nopo>K^,eHHa penieHHH. BejiiraiiHa s(f/x) = K\(f~ 1 (x)/x) xapaKTeproyeT 
Tpy^HOCTB KOHKpeTHoro npiiMepa x h MO>KeT SbiTb Ha3BaHa ero cmouKOcmbto. Hani 
onTHMajibHMH reHepaTop b cpejjHeM TpeSyeT 0(1) niaroB Ha ojihh 3anycK h S(f /x) 3anycK0B. 
HiiKaKoii flpyroH ajiropHTM He mojket JiaTb Jiynniero pe3yjibTaTa. 

OTKpbiTafl npoSjieMa. Hoctohhhmh MHO>KHTejib b onTHMajiBHOM ajiropHTMe 

06paiTj,eHH5I MOJKeT 6bITb npOH3BOJIBHO 60JIBHIHM. HeH3BeCTH0, MffiKHO JIH OrpaHHHHTB 3T0T 
MHOJKHTejIB (jJJia flOCTaTOHHO JJJIHHHMX BXO,H,Ob) HeKOTOpOH a6cOJIIOTHOH KOHCTaHTOH, He 

3aBHCHmeH ot Bbi6opa cpaBHHBaeMoro c onTHMajibHMM ajiropnTMa (cKa»ceM, hhcjiom 10). 

4.2. 3a,a;aHH o6panj;eHHa h oflHOCTopoHHne cpyHKirHH. nojiHoe pacnpe^ejieHne 
^aeT He MeHbinyio BepoaTHOCTB nojiyHHTB TpyflHbiii Bxofl, neM jno6oe ^pyroe. Bjiaro^apa 
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STOMy b KanecTBe TpyjjHoii fljia o6pameHHH (pyHKHHH mojkho b33tb Jiio6yio NP-nojiHyio 
(pyHKn,Hio: Bee ohh o^HHaKOBO xoponiH. O^HaKO o6bihho xoneTca HaiiTH cpyHKipiK), KOTopyio 
Tpy^HO o6paTHTb fljia KaKoro-JinSo o6biHHoro (HanpHMep, paBHOMepHoro) pacnpe^ejieHHa Ha 
Bxo^ax. Heo>KH^i,aHHbiM o6pa30M jieMMa KaK pa3 h yKa3MBaeT Ko^npoBaHHe, npeo6pa3yioiu,ee 
3a^,aHHoe pacnpe^ejieHne (BbiniicjiiiMoe 3a nojiHHOMHajibHoe Bpeivia) b paBHOMepHoe. C ero 
noMonjbio jiio6aa NP-nojiHaa (pyHKinia CTaHOBHTca MaKCiuviajibHO TpyjjHoft oSpameHna. 
O^HaKO b coneTaHHH c TaKHM KOflnpoBaHiieM cpyHKHiia TepaeT npHBJieKaTejibHOCTb, TaK hto 
Bonpoc o nocTpoGHiiii npHBjieKaTejibHoii (pyHKinin, TpyariOH fljia oSpameHHa npH o6bihhom 
pacnpeflejieHHH Ha Bxo^ax, coxpaHaeTca. 

KaK H3BecTHO, hh ,a;jia ojjhoh (pyHKB^Hii He yijajiocb /j;oKa3aTB, hto OHa Tpy/iHa jj;jih 
oSpameHHa, xoTa MHorne (pyHKinin Ka»cyTca TaKOBbiMH. B |191 l20l l24*| l2B| l26l 127] (h pa/j;e 
Jipyrnx paSoT) yKa3aH pa/i, KOiviSHHaTopHbix h ajireSpanaecKnx 3a^aH, KOTopbie aBJiaiOTca 
b cpe^HeM nojiHbiMH npn paBHOMepHOM pacnpe^ejieHHH bxoaob (T.e. ohh He npome jho6oh 
3a^aHH oSpameHna c peajiH3yeMbiM pacnpeflejiemieM) . 

O^HaKO 3th pe3yjibTaTbi Bee eme He JiaiOT ojjhoctopohhhx (pyHKUHii. Pa3Hnn;a Meatfly 

OflHOCTOpOHHHMH (pyHKHHaMH H TpyflHBIMH B CpeflHeM 3aflaHaMH oSpaifleHHa MOJKeT 6bITb 

BbipajKeHa MHorHMH cnocoSaMH. IIpocTeHHiHH H3 hhx coctoht b tom, htoSbi onpeflejiHTb 
o^HOCTopoHHioio (pyHKH,Hio KaK TpyflHyio b cpeflHeM 3aflaay oSpameHHa (pyHKinin, 
coxpansiwmeu dAuny. B stom cjiyaae pa3JiHHHe Meatfly Bbi6opoM cjiyaaHHoro apryivieHTa 
hjih cjiyaaHHoro 3HaaeHHa (cymecTBeHHoe fljia oflHOCTopoHHHx (pyHKHrra) nepecTaeT 6biTb 

BajKHblM. 

B caMOM flejie, KaatflOMy penieHHio cooTBeTCTByeT tojibko o,h;ho 3HaaeHne, nosTOMy fljia 
coxpaHaiomnx fljiHHy (pyHKiniii BepoaTHOCTB noaBjieHHa 3HaaeHna cpyHKHHH H3 flaHHoro 
MHCOKecTBa 3HaneHHH, HMeionnix penieHHa, He MeHbHie BepoaTHOCTB, cooTBeTCTByromeii 
paBHOMepHOMy pacnpeflejieHHio. npn btom, oflHaKO, mokct Sbitb MHoro "6jiH3Hen,OB" - 
penieHHH, cooTBeTCTByioinnx oflHOMy h TOMy ate 3HaneHnio. B 3tom cjiynae mm MoateM 
MOflHcpHHiipoBaTb (pyHKnnio cjieflyioinnM o6pa30M. OTraflaeM JiorapncpM nncjia 6jin3HenpB 
fljia flaHHoro pemeHna w (nycTb stot JiorapncpM paBeH k) h paccMOTpHM cjiynaimbin ajieivieHT 
a yHHBepcajibHoro ceMeiicTBa xeni-cpyHKirnn h a {w). ByfleM canTaTb bbixoaom cpyHKirnn 
Ha6op f(w), k, a, h' a (w), rfle h! nojiyaaeTca H3 h, ecjin ocTaBHTb tojibko k nepBbix 6htob. (3th 
3HaneHna Ha k 6htob fljinHHee pemeHnn h OTo6paataiOTca c noMombio flpyron xeni-(pyHKH;HH 
b CTpoKH toh 5Ke fljiHHbi, hto h penieHHH.) Coio;ep>Kaiii;aaca b stom Bbixo;j;e ia;onojiHHTejiBHaa 
HH(popMan;Ha (npn npaBHJibHO yraijaHHOM 3HaaeHHH k) 6jiH3Ka k cjiyHaimoH, h noTOMy He 
noMoraeT o6pam;eHHio. C flpyroii CTopoHbi, 6jiH3Hen,Bi pa3flejiaiOTca Ha HeSojibnine rpynnbi, h 
noTOMy KOJiHnecTBO (h BepoflTHOCTB npn paBHOMepHOM pacnpe^ejieHHH) Tpy,a,HBix 3HaneHHH 
h KOJinnecTBO hx npoo6pa30B CTaHOBaTca cpaBHHMbiMH. OSpaTHoe yTBep>Kia;eHHe TaKJKe 
BepHo: 

IlpeflJioxeHHe 2 JIw6aH odnocmopoHHatt fyyuKv^usi c MyAbmuMeduanou V(k) 
epeMenu onmuMaAbnoso o6paw,eHUM (m.e. S(x), 3am x = f(w) u paenoMepno 
pacnpedeAenHoso w) MOMcem 6umb npeo6pa3oeana e coxpaHHWU^yto dAuny odnocmopoHHWio 
(fiyuKyuK), y Komopou 8am l/0{k) 3oau npuMepoe HadeMcnocmb noAUHOMuaAbno ceM3<ma c 
V. 

npe>KJa;e Bcero, mbi yBejiHHHBaeM io;ojho Tpy^Hbix /iJia o6pani;eHHH 3HaHeHHH, KaK onncaHO 
b KOHue n. 3.2. Ecjih hhcjio Tpy^Hbix 3HaneHHH cymecTBeHHO MeHBHie, neM hhcjio hx 
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npoo6pa30B, cpyHKiraio Bee paBHO mojkho nepe^ejiaTb b coxpaHaionryio fljiimy 6e3 H3MeHeHiia 
TpyznrocTii, pa3flejiaa 6jiH3Hen,OB, KaK oniicaHO b npeflbiflymeM a63an,e. Bojiee no,irpo6HO 
npouecc npiiMeHeHiia xeniiipoBaHiia k o^hoctopohhhm (pyHKiiiiaM HCCJie^OBaH b [20j. 

4.3. riojiHaa OflHOCTopoHHaa cpyHKiina: npo^oji^ceHHe 3aMom;eHHa. Mbi ceiiHac 
noKa>KeM, KaK MO,a,ii(piiriiipoBaTb sa^aay o 3aMOineHiin, nonyaiiB H3 Hee KOM6HHaTopHyio 
nojiHyio o^HOCTopoHHioio (pyHKiiiiio. TaKHe cpyHKiiiiii He BCTpeaajiiicb b jiHTepaType, 

XOT3 B fH] npHBOflHTCa nOCTpOeHIie HCKyCCTBeHHOH nOJIHOH OflHOCTOpOHHefi (pyHKBHII. 

KoHe^HO, xoponio 6bi HanTii HecKOJibKO npiiMepoB nojiHbix oflHOCTopoHHirx (pyHKroiii, MeHee 
HCKyccTBeHHbix, T.e. Bbirjiaflflin;Hx npiiBjieKaTejibHO fljia aejiOBeKa, He 3HaKOMoro (h He 
>Kejiaioiu,ero 3HaKOMiiTbca) c Teopnen ajiropnTMOB. Mbi ceaaac npaBeaeM oaaH TaKoii npHMep 
"flJia 3aTpaBKH ", Haaeacb Ha to, hto paHO hjih no3ario 6yaeT HaKonjieHa "KpaTaaecKaa Macca" 

nOJIHblX (pyHKUHH, CBe^eHHe KOTOpblX n03BOJIHT flOKa3bIBaTb nojiHOTy pa3HOo6pa3Hbix 
HHTepeCHblX KaHflH^aTOB B OflHOCTOpOHHHe (pyHKD^HH. 

NP-nojiHOTa h OWF-nojiHOTa. IIIirpoKHH ycnex apKa3aTejibCTB NP-nojiHOTbi 
MHoroHHCJieHHbix KOMSnHaTopHbix 3aaaa ocTaeTca 3araapHHMM. 3to Bonpoc CKopee 
HCKyccTBa, aeM HayKH, h noTOMy He Tpe6yioni;HH oaH03HaaHoro oStacHeiiHa. Ho oaHoii 

H3 npHHHH, BHflHMO, aBJiaeTCa 60JIbHI0H Ha6op TOTOBblX NP-nOJIHblX KOMSHHaTOpHblX 

3aaaa, onncaHHe kotopmx He TpeSyeT aHajiH3a (yTOMHTejibHbix) aeTajieii, xapaKTepHbix 
ajia demepMUHupoeauHux BMHHCJiHTejibHbix Moaejieii. J\ji%. nojmomu e cpedneM TaKHX 
npniviepoB noKa cynjecTBeHHO MeHbHie, xoTa ohh h HaKanjiHBaiOTca. C ,zrpyroH ctopohm, moh 
Bonpoc o nocTpoeHHH aBHoro npocToro npniviepa nojiHoft oaHOCTopoHHeii (pyHKroia ocTaBajica 
6e30TBeTHbiM b TeneHne flByx aecaTHjieTaii. 

IlojiHaa o^HOCTopoHHaa cpyHKrraa MOJKeT 6biTb nojiyaeiia MoaiKpHKarraeH 
yHHBepcajibHOH ManiHHbi TbiopHHra (UTM). B cboio oaepeab, npoTOKOJibi paSoTbi 
UTM MoryT SbiTb jierKO npeo6pa30BaHbi b KOMSaHaTopHbie oS^eKTbi c onpeaejieHHMMH 
CBoficTBaMH (Tnna 3aMOHi;eHHH). OnncaHHe sthx cbohctb npome onncaHna ManiHHbi 
TbiopHHra, nocKOJibKy Tenepb HeT Heo6xoaiiMOCTH 3a6oTHTbca o aeTepMHHapoBaHHOCTH 

BblHHCJieHHa: OTHOHieHHe, KOTOpOe Mbi CTpOHM, H He flOJIiKHO 6bITb aeTepMHHHpOBaHHMM. 

ynpomeHHbie aHajiorn BbiHHCJieHHH npHBjieKaTejibHbi CBoen npocTOH KOMSHHaTopHOH 
CTpyKTypoM, KOTopaa no3BOJiaeT CBecTH B03HHKaioiiryio 3aaaay ko MHoatecTBy apyrax (tcm 
caMbiM flOKa3aB nojiHOTy nocjiearrax) . 

3tot noaxoa, ^encTBHTejibHO no3BOJiaeT nocTpoHTb NP-3aaaaa, aBjiaiomneca nojiHbiMH 
b cpearieM (average-complete). OariaKO oh He no3BOJiaeT oSecneaaTb ycjiOBHe coxpaHeHna 
fljiHHbi, KOTopoe cyniecTBeHHO npn nocTpoeHHH nojiHbix oaHOCTopoHHax (pyHKrraii. (Oho 
MOJKeT SbiTb 3aivieHeHO apyraMH TpeSoBaHHaMH, ho h bth Tpe6oBaHna He yaaeTca 
y^OBjieTBopHTb b onncaHHOH Bbinie KOHCTpy khhh . ) Ceaaac Mbi noKa>KeM, KaK MO>KHO 
cpaBHHTejibHO npocTbiMH cpe^CTBaMH (noHaTne pacninpeHHa) nonbiTaTbca npeoaoneTb 
B03HHKaioriiHe npoSjieMM. Ilpn stom mm oSecneaaM coxpaHeHne ajiaHM h npocTyio 
KOM6imaTopHyio CTpyKTypy 3aMonieHHa. Mm HaaeeMca, hto 9Ta nojiHaa oaHOCTopoHHaa 
cpyHKHiia MOJKeT SbiTb nojie3Ha KaK ncxoaHaa TOHKa ajia apKa3aTejibCTB nojiHOTM 

HHTepeCHblX OaHOCTOpOHHHX (pyHKIIHH C nOMOIHblO CBe^eHHH. 
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Hjihtkh: e^HHHHHbie KBa^paTbi, yrjibi kotopmx noMeneHM byKBaMii; hx moxho 
npHKJiaflbiBaTb CTopoHa k CTopoHe, ecjin 6yKBM coBna/iaiOT. PacniiipeHiie: 
MaKCHMajibHoe npo/rojiJKeHHe 3a;jaHHoro nacTHHHoro 3aMomeHHH KBajjpaTa c 
OTMe^eHHoii rpaHnneii b TaKOM nopajxKe, npH kotopom Ka>K^aa cjieflyiomaa 
njiHTKa onpe^ejiaeTca OflH03HaHHO (npn 3a^aHHOM HaSope hjihtok). 
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Onpe^ejieEie 5 PacmupenueM 3aMomeHUH mu na3ueaeM CAedyiomyio ipyHK- 
141110: apsyMenm - eepxHHH cmpoKa 3aM0WfiHusi u na6op pa3peuietiHux iiauitiok; 3HaneHue - 
humchhh cmpoKa 3aM0WfiHusi, noAyuaeMOSo pacmupenueM eepxneu cmpoKU, u na6op 
pa3peuietiHux iiAumoK. 



TeopeMa 1 OyHKi^UH pacmupeHUH 3aMomeHUJi mAHemcn odHocmopoHHeu mosda u 
moAbKO mosda, Kosda odnocmopoHHue cfiytiKi^uu cymecmeyiom. 

Ceedenue: Mm HannHaeM c yHHBepcajibHoii ManinHM Tbioprmra n floSaBjiaeM k Hen 
cneTHHK, KOTopbiH npepbiBaeT ee paSoTy nocjie, CKa>KeM, n 2 niaroB. Mm coxpaHaeM Konnio 
nporpaMMbi (HanajibHbin OTpe30K Bxo/ia) Hen3MeHHOH, a TaKJKe npnHyjxHTejibHO flejiaeM 
fljiHHy Bbixo^a paBHOH fljiHHe Bxojja. 3Ta KOHCTpyKHna jjaeT HaM nojiHyio o/xhoctopohhioio 
(pyHKipno, coxpaHmomyio flJinHy (npaB^a, onHCbiBaeMyio c noMOinbio BbinncjinTejibHon 
MOflejin). ,ZIajiee mm cbo^hm BbinncjieHHe UTM (c yKa3aHHMMH MOflncpHKannaMH) k 3a,a,aHe 
o 3aMOiu,GHHH c noMOiu,bio CTaH^apTHoro npneivia. Mm jj,o6aBjineM cnennajibHbin zpanuHHUU 
cuMeoA n pa3peniaeM ero Jinnib b miiiTKax, b kotopmx oh coneTaeTca c ciiMBOJiaMii Bxo^Horo 
hjih Bbixo^Horo ajicpaBHTOB (o^HHaKOBoro pa3Mepa) , a TaKJKe c cumboaom Konv^a Aenmu hjih 
c chmbojiom, HannHaioinHM BbiHHCJiGHHe (b 3aBHCHMOCTH ot CTopoHbi hjihtkh). OcTaeTca 
BOcnojib30BaTbca onpe^ejieHneM pacninpeHHa. 

3aMom,eHHe ABjiaeTca npocToii KOMSnHaTopHon saflaneii, ho ee He^eTepMHHHpoBaHHaa 
npnpo^a BbiHyjKflaeT Hac yKa3MBaTb Bee hjihtkh b KBa^paTe, hto MeniaeT coxpaHeHHio 

JJ,JIHHM. ECJIH TpeSOBaTb, HToSbl Ha6op njIHTOK BbIHy>K^I,ajI ^eTepMHHH3M BMHHCJieHHfl, 
nOJiyHHTCH rpOM03flKaH KOHCTpyKUHH, KOTOpyK) TpyflHO CBH3aTb C npOCTblMH 

KOiviSHHaTopHbiMH 3a;jaHaMH. BiviecTO SToro, roBopa o pacninpeHnax, mm He HaKJiajxMBaeM 
orpaHHneHHH Ha mhokcctbo pa3penieHHbix njiHTOK, 3aTO pa3peniaeM npHKjia^MBaTb jinnib 
njiHTKH, KOTopbie 0flH03HaHH0 onpe^ejiaiOTca (npn flaHHOM HaSope pa3penieHHbix bjihtok) 
y>Ke HMeiomHMHCH. Ilpn stom HeKOTopbie HacTHHHbie 3aMomeHHfl KBa^paTa y^aeTca 
npojj;ojiJKHTb flo nojiHbix, floSaBJiaa hjihtkh OflHy 3a jxpyroft, /xpyrne - HeT. 3tot npouecc 
npHBOflHT k noTepe scpcpeKTHBHOCTH (HeSojibHioii jjjih napajuiejibHbix MO^ejieii), ho sto jjjih 
Hac He Ba>KHO. 

OcTaeTca HHTepecHaa 3ajiaHa: CBecTH 3Ty ojxhoctopohhioio cpyHKHino k /ipyrHM 
npocTMM KOMSnHaTopHMM hjih ajireSpannecKHM (pyHKii,HaM, TeM caMMM flOKa3aB hx 
nojiHOTy. 

IlpoH3BOJibHMe oflHOCTopoHHne (pyHKn,HH He Tax npocTO npHMeHHTb Ha npaKTHKe. Bo 
mhothx cjiynaax (HanpHMep, npn nocTpoeHHH nceBflocjiyHaHHbix nocjieflOBaTejibHOCTeii) 
flpyrnx npeflnojio>KeHHH (popMajibHO He TpeSyeTca, ho npnxoflHTca Hcnojib30BaTb 
nocTpoeHHH, KOTopbie KaTacTpocpHnecKH yxyjxniaiOT KOJiHHecTBeHHbie noKa3aTejiH 
3(p(peKTHBHOCTH. Bojiee npHro/xHbie Ha npaKTHKe KOHCTpyKii^HH Hcnojib3yiOT ojTHOCTopoHHne 
(pyHKii,HH c HeKOTopMMH flonojiHHTejibHMMH CBOHCTBaMH, HanpHMep, c MajiOH SHTponnen 
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b CMbicjie PeHbii. 3to ace Tpe6oBaHne ncnojib3yeTca npn npeo6pa30BaHHH cjia6o 
oflHOCTopoHHeii (pyHKn,HH b chjibho o^HOCTopoHHioio (c coxpaHGHiieM napaMeTpa 
ctohkocth, kbk onHcaHO b |28j). Cjie^ryioinee 3aMenaHHe yKa3MBaeT o^hh h3 bosmojkhbix 
nyTen nojiyneHHa oflHOCTopoHHen (pyHKinm, y,a,OBjieTBopfliomeH STOMy TpeSoBaHHio. 
(B HeM BbipajKeHne f(x) + ax mojkct SbiTb 3aivieHeHO Ha flpyrne xeni-cbyHKHHH.) 

3aMenaHue. ApryivieHTbi (pyHKHHH g(a, x) = (a, f(x) + ax) b cpe^HeM HMeiOT He 6ojiee 
o^Horo 6jiH3Heiia fljia jhoSoh coxpaHaiomeii fljiHHy cbyHKHHH / h ^Jia a,x £ GF 2 iix|| . 

THnoTe3a. LJocmpoeHnaH manuM o6pa,30M (pynKyun g neAHemcn odnocmopoHneu, 
ecAU (jjyHKi^UH f 6ujia maKoeou, u UMeem mom otce (c mouHocmhw do noAUHOMuaAhnozo 
MHOwcumeAtt) napaMemp cmouKocmu. 
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